← Back

CVE-2010-4376

nvd nist
Published: Dec 14, 2010Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Affected (14)

2 products
Realplayer Sp
Realplayer
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Realnetworks
Version 1.0.0
Version 1.0.1
Version 1.0.2
Version 1.0.5
Version 1.1.1
Version 1.1
Configuration C
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Realnetworks
Version 11.0.1
Version 11.0.2
Version 11.0.3
Version 11.0.4
Version 11.0.5
Version 11.0
Version 11.1
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Version 11.0.2.1744
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

References (8)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.