CVE-2010-2998: Input Validation
Published Oct 18, 2010
·Updated
Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue.
Affected Software
9 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
Event History
Oct 18, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2998?
CVE-2010-2998 has a high severity rating due to its potential to allow remote code execution.
2
Which versions of RealPlayer are affected by CVE-2010-2998?
CVE-2010-2998 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.0.1.
3
How do I fix CVE-2010-2998?
To fix CVE-2010-2998, update RealPlayer to the latest version provided by RealNetworks.
4
What type of vulnerability is CVE-2010-2998?
CVE-2010-2998 is an array index error vulnerability that can be exploited via malformed .IVR files.
5
What is the impact of exploiting CVE-2010-2998?
Exploitation of CVE-2010-2998 can lead to arbitrary code execution on the target system.