CVE-2010-4381

RealPlayer 11.0-11.1 and SP 1.0-1.1.4 - Heap-Based Buffer Overflow via Crafted AAC File

Title source: llm

Description

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1024861

Vendor Advisory x_refsource_confirm

http://service.real.com/realplayer/security/12102010_player/en/

Scores

EPSS 0.0123

EPSS Percentile 79.4%

Details

CWE

CWE-119

Status published

Products (18)

realnetworks/realplayer 11.0

realnetworks/realplayer 11.0.1

realnetworks/realplayer 11.0.2

realnetworks/realplayer 11.0.3

realnetworks/realplayer 11.0.4

realnetworks/realplayer 11.0.5

realnetworks/realplayer 11.1

realnetworks/realplayer 12.0.0.1444

realnetworks/realplayer 2.1.2

realnetworks/realplayer_sp 1.0.0

... and 8 more

Published Dec 14, 2010

Tracked Since Feb 18, 2026