CVE-2010-4392 | BDVDB-2026-44328 Detail

Description#

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zerodayinitiative.com/advisories/ZDI-10-280
http://www.redhat.com/support/errata/RHSA-2010-0981.html
http://www.securitytracker.com/id?1024861
http://osvdb.org/69852
http://service.real.com/realplayer/security/12102010_player/en/

Exploit#

No public exploit known

History#

Version 12010-12-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.