CVE-2009-0375: Code Injection
Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a filename length field containing a large integer, which triggers overwrite of an arbitrary memory location with a 0x00 byte value, related to use of RealPlayer through a Windows Explorer plugin.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0375?
CVE-2009-0375 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2009-0375?
To mitigate CVE-2009-0375, update RealPlayer to the latest version as recommended by RealNetworks.
Which versions of RealPlayer are affected by CVE-2009-0375?
CVE-2009-0375 affects RealPlayer versions 10, 10.5, 11.0.0 through 11.0.4, and several other variants.
Can CVE-2009-0375 be exploited remotely?
Yes, CVE-2009-0375 can be exploited remotely by attackers to execute arbitrary code.
What action should users of affected RealPlayer versions take regarding CVE-2009-0375?
Users should immediately upgrade their affected versions of RealPlayer or remove the software to avoid exploitation of CVE-2009-0375.