CVE-2010-4385

RealPlayer 11.0-11.1 and RealPlayer SP 1.0-1.1.4 - Integer Overflow via SIPR Stream Frame Dimensions

Title source: llm
STIX 2.1

Description

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0981.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1024861

Scores

EPSS 0.0073
EPSS Percentile 72.9%

Details

CWE
CWE-189
Status published
Products (18)
realnetworks/realplayer 11.0
realnetworks/realplayer 11.0.1
realnetworks/realplayer 11.0.2
realnetworks/realplayer 11.0.3
realnetworks/realplayer 11.0.4
realnetworks/realplayer 11.0.5
realnetworks/realplayer 11.1
realnetworks/realplayer 11.0.2.1744
realnetworks/realplayer 2.1.2
realnetworks/realplayer_sp 1.0.0
... and 8 more
Published Dec 14, 2010
Tracked Since Feb 18, 2026