Description
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed MLLT atom in an AAC file.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1024861
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-10-273
Vendor Advisory x_refsource_confirm
http://service.real.com/realplayer/security/12102010_player/en/
Scores
EPSS
0.0247
EPSS Percentile
85.5%
Details
CWE
CWE-189
Status
published
Products (10)
realnetworks/realplayer
11.0
realnetworks/realplayer
11.0.1
realnetworks/realplayer
11.0.2
realnetworks/realplayer
11.0.3
realnetworks/realplayer
11.0.4
realnetworks/realplayer
11.0.5
realnetworks/realplayer
11.1
realnetworks/realplayer
11.0.2.1744
realnetworks/realplayer_sp
1.0.0
realnetworks/realplayer_sp
1.0.1
Published
Dec 14, 2010
Tracked Since
Feb 18, 2026