CVE-2010-4385
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD
Description
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream.
Affected (18)
Products: Realnetworks: Realplayer, Realplayer Sp
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.0.1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.0.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.0.2.1744 |
| Running on/with | Platform Versions |
|---|---|
Linux Linux Kernel | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.1.2 |
Related CWEs
References (6)
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.