CVE-2010-4387

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted audio...

CVE-2010-4388

The 1 Upsell.htm, 2 Main.html, and 3 Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended...

CVE-2010-4389

Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer...

CVE-2010-4390

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file...

CVE-2010-4392

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap...

CVE-2010-4397

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file...

CVE-2010-0125

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors...

CVE-2010-0121

CVE-2010-0121 affects RealNetworks RealPlayer family (RealPlayer 11.x, RealPlayer SP 1.x, Mac RealPlayer 11.x–12.0.0.1444, Linux RealPlayer 11.0.2.1744). The vulnerability is in the RealAudio cook codec uninitialised memory during parsing, per NVD and Secunia Secunia Research advisory; impact is ...

CVE-2010-0125

CVE-2010-0125 affects RealNetworks RealPlayer products: RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0–12.0.0.1444. The vulnerability lies in parsing spectral data in AAC audio content, with unspecified impact and remote attack potential as sta...

CVE-2010-2579

The CVE-2010-2579 issue affects RealNetworks RealPlayer family (RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, Enterprise 2.1.2, Mac 11.x, Linux 11.0.2.1744). The root cause is a failure to properly initialize the Cook codec’s channel count, leading to use of uninitialized memory and memory acces...

CVE-2010-2997

CVE-2010-2997 is tied to multiple advisories (RHSA-2010:0981, CESA-2010:0981) and OpenVAS/Nessus entries describing multiple security flaws in RealPlayer/HelixPlayer, potentially enabling arbitrary code execution via crafted media/stream content. Remediation across affected platforms centers on r...

CVE-2010-2999

RealNetworks RealPlayer vulnerable to integer overflow via a malformed MLLT atom in AAC files (CVE-2010-2999). Affected: RealPlayer 11.0–11.1 (Windows/macOS/Linux), RealPlayer SP 1.0.x; exploitation via AAC MLLT parsing can lead to remote code execution or heap memory corruption. The ZDI advisory...

CVE-2010-4375

CVE-2010-4375 is a heap-based buffer overflow in RealNetworks RealPlayer 11.0–11.1 and Mac/Linux RealPlayer 11.0–11.1, exploitable via malformed multi-rate audio data to achieve remote code execution. The connected advisories tie this to HelixPlayer, indicating overlapping code bases with RealPla...

CVE-2010-4377

The CVE-2010-4377 entry corresponds to a RealPlayer heap-based buffer overflow in RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, Mac RealPlayer 11.0–12.0.0.1444, and Linux RealPlayer 11.0.2.1744. The underlying issue occurs when processing the cook audio codec data in a Real Audio file, where spe...

CVE-2010-4379

CVE-2010-4379 describes a heap-based buffer overflow in RealPlayer (versions 11.0–11.1, SP 1.0–1.1.4, Enterprise 2.1.2, Mac/Linux RealPlayer 11.0–11.1, HelixPlayer 1.0.6) via crafted SIPR files. Connected advisories confirm RealPlayer/HelixPlayer flaws could, when opening or playing a malicious f...

CVE-2010-4380

CVE-2010-4380 affects RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The issue is a heap-based buffer overflow triggered by a crafted SOUND file, enabling remote attackers to cause an unspecified impact. Connected sources (OpenVAS/NVD) confirm the vul...

CVE-2010-4382

CVE-2010-4382 is part of a set of RealPlayer/HelixPlayer flaws (RealPlayer 11.x, HelixPlayer) that could allow remote code execution via crafted RealMedia content. Surrounding docs confirm HelixPlayer removal and advisories (RHSA-2010:0981, CESAs) due to multiple security flaws; some entries expl...

CVE-2010-4383

CVE-2010-4383 is among a set of flaws in RealPlayer/Helix Player (RealPlayer 11.x, SP, Enterprise, Mac/Linux RealPlayer; HelixPlayer) that share a common codebase. The connected documents confirm multiple security flaws could be triggered by opening or playing malicious media files/streams, poten...

CVE-2010-4386

CVE-2010-4386 affects RealPlayer 11.x, RealPlayer SP 1.x, Linux RealPlayer 11.0.2.1744, and HelixPlayer 1.0.6 and related builds. The root cause is heap memory corruption triggered by a crafted RealMedia file, enabling remote arbitrary code execution or a denial of service. Public advisories show...

CVE-2010-4387

The CVE-2010-4387 issue affects RealNetworks RealPlayer’s RealAudio codec across multiple platforms (Windows RealPlayer 11.x, RealPlayer SP, Mac, Linux). The vulnerability stems from decoding a crafted RealMedia audio stream in which a value is not properly validated, leading to heap memory corru...