Lucene search

[email protected]CVE-2010-4378

HistoryDec 14, 2010 - 4:00 p.m.

CVE-2010-4378

2010-12-1416:00:04

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4378

realnetworks

realplayer

remote code execution

denial of service

heap memory corruption

rv20

nvd

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.153 Low

EPSS

Percentile

95.9%

JSON

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.

Affected configurations

NVD

Node

realnetworksrealplayerMatch11.0

realnetworksrealplayerMatch11.0.1

realnetworksrealplayerMatch11.0.2

realnetworksrealplayerMatch11.0.3

realnetworksrealplayerMatch11.0.4

realnetworksrealplayerMatch11.0.5

realnetworksrealplayerMatch11.1

Node

realnetworksrealplayer_spMatch1.0.0

realnetworksrealplayer_spMatch1.0.1

realnetworksrealplayer_spMatch1.0.2

realnetworksrealplayer_spMatch1.0.5

realnetworksrealplayer_spMatch1.1

realnetworksrealplayer_spMatch1.1.1

realnetworksrealplayer_spMatch1.1.2

realnetworksrealplayer_spMatch1.1.3

realnetworksrealplayer_spMatch1.1.4

realnetworksrealplayer_spMatch1.1.5

Node

realnetworksrealplayerMatch11.0.2.1744

AND

linuxlinux_kernel

Node

realnetworksrealplayerMatch2.1.2enterprise

realnetworksrealplayerMatch2.1.3enterprise

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.0.1
realnetworks:realplayerrealnetworks realplayereq11.0.2
realnetworks:realplayerrealnetworks realplayereq11.0.3
realnetworks:realplayerrealnetworks realplayereq11.0.4
realnetworks:realplayerrealnetworks realplayereq11.0.5
realnetworks:realplayerrealnetworks realplayereq11.1

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.1
realnetworks:realplayer	realnetworks realplayer	eq	11.0.2
realnetworks:realplayer	realnetworks realplayer	eq	11.0.3
realnetworks:realplayer	realnetworks realplayer	eq	11.0.4
realnetworks:realplayer	realnetworks realplayer	eq	11.0.5
realnetworks:realplayer	realnetworks realplayer	eq	11.1