CVE-2010-3000: Integer Overflow
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HXFLVMETAAMFTYPEMIXEDARRAY or (2) HXFLVMETAAMFTYPEARRAY data in an FLV file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3000?
CVE-2010-3000 has a high severity rating due to its potential to allow remote code execution.
How do I fix CVE-2010-3000?
To fix CVE-2010-3000, update RealPlayer to the latest version as recommended by RealNetworks.
Which versions of RealPlayer are affected by CVE-2010-3000?
CVE-2010-3000 affects RealPlayer versions 11.0, 11.1, and certain versions of RealPlayer SP from 1.0 to 1.1.4.
What type of vulnerability is CVE-2010-3000?
CVE-2010-3000 is classified as an integer overflow vulnerability that can lead to arbitrary code execution.
How can attackers exploit CVE-2010-3000?
Attackers can exploit CVE-2010-3000 by crafting malicious FLV files with specific data types designed to trigger the overflow.