Lucene search

[email protected]CVE-2010-4379

HistoryDec 14, 2010 - 4:00 p.m.

CVE-2010-4379

2010-12-1416:00:04

CWE-119

[email protected]

web.nvd.nist.gov

realnetworks

realplayer

buffer overflow

cve-2010-4379

sipr file

nvd

security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

JSON

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Affected configurations

NVD

Node

realnetworksrealplayerMatch11.0

realnetworksrealplayerMatch11.0.1

realnetworksrealplayerMatch11.0.2

realnetworksrealplayerMatch11.0.3

realnetworksrealplayerMatch11.0.4

realnetworksrealplayerMatch11.0.5

realnetworksrealplayerMatch11.1

Node

realnetworksrealplayer_spMatch1.0.0

realnetworksrealplayer_spMatch1.0.1

realnetworksrealplayer_spMatch1.0.2

realnetworksrealplayer_spMatch1.0.5

realnetworksrealplayer_spMatch1.1

realnetworksrealplayer_spMatch1.1.1

realnetworksrealplayer_spMatch1.1.2

realnetworksrealplayer_spMatch1.1.3

realnetworksrealplayer_spMatch1.1.4

Node

realnetworksrealplayerMatch11.0

realnetworksrealplayerMatch11.0.1

realnetworksrealplayerMatch11.0.2

realnetworksrealplayerMatch11.0.3

realnetworksrealplayerMatch11.0.4

realnetworksrealplayerMatch11.0.5

realnetworksrealplayerMatch11.1

AND

applemac_os_x

Node

realnetworksrealplayerMatch11.0.2.1744

AND

linuxlinux_kernel

Node

realnetworksrealplayerMatch2.1.2enterprise

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.0.1
realnetworks:realplayerrealnetworks realplayereq11.0.2
realnetworks:realplayerrealnetworks realplayereq11.0.3
realnetworks:realplayerrealnetworks realplayereq11.0.4
realnetworks:realplayerrealnetworks realplayereq11.0.5
realnetworks:realplayerrealnetworks realplayereq11.1

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.1
realnetworks:realplayer	realnetworks realplayer	eq	11.0.2
realnetworks:realplayer	realnetworks realplayer	eq	11.0.3
realnetworks:realplayer	realnetworks realplayer	eq	11.0.4
realnetworks:realplayer	realnetworks realplayer	eq	11.0.5
realnetworks:realplayer	realnetworks realplayer	eq	11.1