Lucene search
HistoryDec 14, 2010 - 4:00 p.m.
CVE-2010-4397
cve-2010-4397
integer overflow
pnen3260.dll
realplayer
remote code execution
aac file
7.8 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.1 Low
EPSS
Percentile
94.9%
Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.
Affected configurations
Node
realnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
Node
realnetworksrealplayer_spMatch1.0.0
ORrealnetworksrealplayer_spMatch1.0.1
ORrealnetworksrealplayer_spMatch1.0.2
ORrealnetworksrealplayer_spMatch1.0.5
ORrealnetworksrealplayer_spMatch1.1
ORrealnetworksrealplayer_spMatch1.1.1
Node
realnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
applemac_os_x
Node
realnetworksrealplayerMatch11.0.2.1744
linuxlinux_kernel
Related
prion
prion
Integer overflow
2010-12-14 16:00:00
cvelist
cvelist
CVE-2010-4397
2010-12-14 15:00:00
zdi
zdi
nvd
nvd
CVE-2010-4397
2010-12-14 16:00:05
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows
2010-12-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10
2010-12-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux
2010-12-29 00:00:00
nessus
nessus
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
2010-11-16 00:00:00
7.8 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.1 Low
EPSS
Percentile
94.9%
Related for CVE-2010-4397