First published: Mon Jan 25 2010(Updated: )
Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
RealPlayer | =11.0.1 | |
RealNetworks Helix Player Linux | =11.0.1 | |
RealPlayer | =10.0 | |
RealNetworks Helix Player Linux | =11.0.0 | |
RealNetworks Helix Player Linux | =10.0 | |
RealPlayer | =11.0.0 | |
RealPlayer | =10.0 | |
RealPlayer | =10.5 | |
RealPlayer | =11.0 | |
RealPlayer | =11.0.1 | |
RealPlayer | =11.0.2 | |
RealPlayer | =11.0.3 | |
RealPlayer | =11.0.4 | |
RealPlayer | =11.0.5 | |
RealPlayer | ||
RealPlayer | =1.0.0 | |
RealPlayer | =1.0.1 | |
Microsoft Windows Operating System | ||
RealPlayer | =10.1 | |
Apple iOS and macOS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-4244 is classified as a high severity vulnerability due to its potential to allow remote code execution.
To fix CVE-2009-4244, update RealPlayer or Helix Player to the latest version provided by RealNetworks.
CVE-2009-4244 affects RealPlayer 10, 10.5, 11, and Helix Player versions on various platforms including Windows, Linux, and macOS.
Yes, CVE-2009-4244 can be exploited by attackers remotely, potentially compromising the user's system.
Yes, CVE-2009-4244 specifically affects RealPlayer versions 10.0 through 11.0.4, along with Helix Player versions up to 10.x.