Heap overflow

2010-01-2519:30:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.432 Medium

EPSS

Percentile

97.2%

JSON

Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.

CPENameOperatorVersion
helix_playereq11.0.1
helix_playereq11.0.0
helix_playereq10.0
realplayereq10.0
realplayereq10.5
realplayereq11.0
realplayereq11.0.1
realplayereq11.0.2
realplayereq11.0.3
realplayereq11.0.4

Name	Operator	Version
helix_player	eq	11.0.1
helix_player	eq	11.0.0
helix_player	eq	10.0
realplayer	eq	10.0
realplayer	eq	10.5
realplayer	eq	11.0
realplayer	eq	11.0.1
realplayer	eq	11.0.2
realplayer	eq	11.0.3
realplayer	eq	11.0.4