CVE-2010-0117: Critical severity realplayer vulnerability
Published Aug 30, 2010
·Updated
RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.
Affected Software
12 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.1
Microsoft Windows
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
Event History
Aug 30, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
08:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0117?
CVE-2010-0117 has a severity rating of critical due to the potential for remote code execution.
2
How do I fix CVE-2010-0117?
To fix CVE-2010-0117, update RealPlayer to the latest version provided by RealNetworks.
3
Which versions are affected by CVE-2010-0117?
CVE-2010-0117 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.4.
4
How can CVE-2010-0117 be exploited?
CVE-2010-0117 can be exploited by attackers using crafted MP4 content to execute arbitrary code.
5
What platforms are vulnerable to CVE-2010-0117?
CVE-2010-0117 affects RealNetworks RealPlayer versions on Windows operating systems.