CVE-2010-4397

RealPlayer 11.0-11.1 and RealPlayer SP 1.0-1.1.1 - Remote Code Execution via Crafted TIT2 Atom in AAC File

Title source: llm
STIX 2.1

Description

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1024861
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/69856
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-10-269

Scores

EPSS 0.0262
EPSS Percentile 85.9%

Details

CWE
CWE-189
Status published
Products (14)
realnetworks/realplayer 11.0
realnetworks/realplayer 11.0.1
realnetworks/realplayer 11.0.2
realnetworks/realplayer 11.0.3
realnetworks/realplayer 11.0.4
realnetworks/realplayer 11.0.5
realnetworks/realplayer 11.1
realnetworks/realplayer 11.0.2.1744
realnetworks/realplayer_sp 1.0.0
realnetworks/realplayer_sp 1.0.1
... and 4 more
Published Dec 14, 2010
Tracked Since Feb 18, 2026