CVE-2010-0120: Buffer Overflow
Published Aug 30, 2010
·Updated
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.
Affected Software
12 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.1
Microsoft Windows
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
Event History
Aug 30, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
08:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0120?
CVE-2010-0120 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2010-0120?
To fix CVE-2010-0120, update RealPlayer and RealPlayer SP to the latest available versions.
3
What versions of RealPlayer are affected by CVE-2010-0120?
CVE-2010-0120 affects RealPlayer versions 11.0 to 11.1 and all versions of RealPlayer SP from 1.0 to 1.1.4.
4
What types of attacks can exploit CVE-2010-0120?
CVE-2010-0120 can be exploited by attackers through specially crafted QCP audio files that trigger buffer overflow conditions.
5
Is CVE-2010-0120 specific to certain operating systems?
CVE-2010-0120 specifically affects RealPlayer applications running on Microsoft Windows.