CVE-2010-2578: Buffer Overflow
Published Oct 18, 2010
·Updated
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted QCP file.
Affected Software
17 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer=2.1.2
Event History
Oct 18, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2578?
CVE-2010-2578 is considered a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2010-2578?
To fix CVE-2010-2578, update RealPlayer to the latest version provided by RealNetworks.
3
What software versions are affected by CVE-2010-2578?
CVE-2010-2578 affects RealPlayer versions 11.0 to 11.1, RealPlayer SP versions 1.0 to 1.1.4, and RealPlayer Enterprise 2.1.2.
4
Can CVE-2010-2578 be exploited by local attackers?
CVE-2010-2578 is primarily a remote-code execution vulnerability, indicating it should be exploited by remote attackers.
5
What impact does CVE-2010-2578 have if successfully exploited?
If exploited, CVE-2010-2578 can allow attackers to execute arbitrary code on the affected system.