Lucene search
HistoryDec 14, 2010 - 4:00 p.m.
CVE-2010-4389
cve
2010
4389
buffer overflow
realplayer
nvd
security
vulnerability
code execution
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
Low
0.235 Low
EPSS
Percentile
96.6%
Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer.
Affected configurations
Node
realnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
Node
realnetworksrealplayer_spMatch1.0.0
ORrealnetworksrealplayer_spMatch1.0.1
ORrealnetworksrealplayer_spMatch1.0.2
ORrealnetworksrealplayer_spMatch1.0.5
ORrealnetworksrealplayer_spMatch1.1
ORrealnetworksrealplayer_spMatch1.1.1
ORrealnetworksrealplayer_spMatch1.1.2
ORrealnetworksrealplayer_spMatch1.1.3
ORrealnetworksrealplayer_spMatch1.1.4
ORrealnetworksrealplayer_spMatch1.1.5
Node
realnetworksrealplayerMatch11.0.2.1744
linuxlinux_kernel
Related
zdi
zdi
cvelist
cvelist
CVE-2010-4389
2010-12-14 15:00:00
prion
prion
Heap overflow
2010-12-14 16:00:00
nvd
nvd
CVE-2010-4389
2010-12-14 16:00:04
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows
2010-12-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10
2010-12-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux
2010-12-29 00:00:00
nessus
nessus
Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities
2010-11-15 00:00:00
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
2010-11-16 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
Low
0.235 Low
EPSS
Percentile
96.6%
Related for CVE-2010-4389