CVE-2010-2997 | BDVDB-2026-44307 Detail

Description#

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.redhat.com/support/errata/RHSA-2010-0981.html
http://www.zerodayinitiative.com/advisories/ZDI-10-270
http://www.securitytracker.com/id?1024861
http://service.real.com/realplayer/security/12102010_player/en/

Exploit#

No public exploit known

History#

Version 12010-12-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.