CVE-2010-4387

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted audio...

CVE-2010-4392

CVE-2010-4392 is a heap-based buffer overflow in RealPlayer/HelixPlayer family that allows remote code execution via crafted ImageMap data in RealMedia files. Affected: RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, RealPlayer Enterprise 2.1.2–2.1.3, Linux RealPlayer 11.0.2.1744, possibly HelixPl...

CVE-2010-4378

CVE-2010-4378 affects RealPlayer/HelixPlayer family. The drv2.dll RV20 decompression component can be triggered by a crafted RV20 video stream length field, leading to remote arbitrary code execution or heap memory corruption. Affected products include RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1....

CVE-2010-4377

The CVE-2010-4377 entry corresponds to a RealPlayer heap-based buffer overflow in RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, Mac RealPlayer 11.0–12.0.0.1444, and Linux RealPlayer 11.0.2.1744. The underlying issue occurs when processing the cook audio codec data in a Real Audio file, where spe...

CVE-2010-4385

CVE-2010-4385 is part of a set of vulnerabilities affecting RealPlayer/HelixPlayer (RealPlayer 11.x, RealPlayer SP, HelixPlayer) with multiple flaws in the RealPlayer/HelixPlayer codebase. The initial entry notes an integer overflow vulnerability triggered by crafted SIPR frame dimensions, enabli...

CVE-2010-2997

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2010-4388

The 1 Upsell.htm, 2 Main.html, and 3 Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended...

CVE-2010-4376

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a...

CVE-2010-2997

CVE-2010-2997 is tied to multiple advisories (RHSA-2010:0981, CESA-2010:0981) and OpenVAS/Nessus entries describing multiple security flaws in RealPlayer/HelixPlayer, potentially enabling arbitrary code execution via crafted media/stream content. Remediation across affected platforms centers on r...

CVE-2010-4380

CVE-2010-4380 affects RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The issue is a heap-based buffer overflow triggered by a crafted SOUND file, enabling remote attackers to cause an unspecified impact. Connected sources (OpenVAS/NVD) confirm the vul...

CVE-2010-4382

CVE-2010-4382 is part of a set of RealPlayer/HelixPlayer flaws (RealPlayer 11.x, HelixPlayer) that could allow remote code execution via crafted RealMedia content. Surrounding docs confirm HelixPlayer removal and advisories (RHSA-2010:0981, CESAs) due to multiple security flaws; some entries expl...

CVE-2010-4387

The CVE-2010-4387 issue affects RealNetworks RealPlayer’s RealAudio codec across multiple platforms (Windows RealPlayer 11.x, RealPlayer SP, Mac, Linux). The vulnerability stems from decoding a crafted RealMedia audio stream in which a value is not properly validated, leading to heap memory corru...

CVE-2010-4395

RealNetworks RealPlayer contains a heap-based buffer overflow in the AAC decoding path that affects RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and Linux RealPlayer 11.0.2.1744, allowing remote code execution via a crafted conditional component in AAC frame data. The related OpenVAS/NVD entrie...

CVE-2010-0121

CVE-2010-0121 affects RealNetworks RealPlayer family (RealPlayer 11.x, RealPlayer SP 1.x, Mac RealPlayer 11.x–12.0.0.1444, Linux RealPlayer 11.0.2.1744). The vulnerability is in the RealAudio cook codec uninitialised memory during parsing, per NVD and Secunia Secunia Research advisory; impact is ...

CVE-2010-4381

CVE-2010-4381 describes a heap-based buffer overflow in RealNetworks RealPlayer products (RealPlayer 11.x, RealPlayer SP, RealPlayer Enterprise, and Mac RealPlayer up to 12.0.0.1444) that is triggered by a crafted AAC file. The vulnerability permits remote attackers to achieve unspecified impact....

CVE-2010-4379

CVE-2010-4379 describes a heap-based buffer overflow in RealPlayer (versions 11.0–11.1, SP 1.0–1.1.4, Enterprise 2.1.2, Mac/Linux RealPlayer 11.0–11.1, HelixPlayer 1.0.6) via crafted SIPR files. Connected advisories confirm RealPlayer/HelixPlayer flaws could, when opening or playing a malicious f...

CVE-2010-4390

CVE-2010-4390 : RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and Linux RealPlayer 11.0.2.1744 contain multiple heap-based buffer overflows. An attacker could remotely exploit via a crafted IVR header. The provided sources do not specify exact impact, affected components beyond the ...

CVE-2010-4394

RealPlayer vulnerability CVE-2010-4394 affects RealNetworks RealPlayer 11.0–11.1 and RealPlayer SP 1.0–1.1.5. The issue is a heap-based buffer overflow in RealPlayer’s parsing of a Server header within a RealPix-related HTTP response, allowing remote code execution. The disclosed advisory (ZDI-10...

CVE-2010-4380

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file...

CVE-2010-4391

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allows remote attackers to execute arbitrary code via a crafted value in an unspecified header field in an RMX file...