CVE-2010-2579: Medium severity realplayer vulnerability

Published Dec 14, 2010

Updated

The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified "memory access" via unknown vectors.

Affected Software

19 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

Apple iOS and macOS

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2579?

CVE-2010-2579 has been classified with high severity due to the potential for arbitrary memory access leading to exploitation.

How do I fix CVE-2010-2579?

The recommended fix for CVE-2010-2579 is to update to the patched versions of RealPlayer that address this vulnerability.

Which versions of RealPlayer are affected by CVE-2010-2579?

CVE-2010-2579 affects RealPlayer versions from 11.0 through 11.1, including various SP versions.

Can CVE-2010-2579 lead to remote code execution?

Yes, CVE-2010-2579 can enable remote code execution if successfully exploited.

Is there a workaround for CVE-2010-2579 while waiting for a patch?

There are currently no recommended workarounds for CVE-2010-2579, and updating to the latest version is advised.