CVE-2010-4386

2010-12-1416:00:00

CWE-119

[email protected]

web.nvd.nist.gov

realnetworks

realplayer

cve-2010-4386

remote attack

arbitrary code execution

denial of service

heap memory corruption

realmedia

video file

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.034 Low

EPSS

Percentile

91.5%

JSON

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.0.4
realnetworks:realplayerrealnetworks realplayereq11.0.2
realnetworks:realplayerrealnetworks realplayereq11.0.3
realnetworks:realplayerrealnetworks realplayereq11.0.5
realnetworks:realplayerrealnetworks realplayereq11.1
realnetworks:realplayerrealnetworks realplayereq11.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.1.3
realnetworks:realplayer_sprealnetworks realplayer speq1.0.0

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.4
realnetworks:realplayer	realnetworks realplayer	eq	11.0.2
realnetworks:realplayer	realnetworks realplayer	eq	11.0.3
realnetworks:realplayer	realnetworks realplayer	eq	11.0.5
realnetworks:realplayer	realnetworks realplayer	eq	11.1
realnetworks:realplayer	realnetworks realplayer	eq	11.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.1.3
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.0.0