CVE-2010-3748: Buffer Overflow
Published Oct 18, 2010
·Updated
Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via unknown vectors.
Affected Software
17 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer=2.1.2
Event History
Oct 18, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3748?
CVE-2010-3748 is classified as a medium severity vulnerability due to the potential for remote exploitation.
2
How do I fix CVE-2010-3748?
The recommended fix for CVE-2010-3748 is to update RealPlayer to the latest version provided by RealNetworks.
3
What are the affected versions of RealPlayer for CVE-2010-3748?
CVE-2010-3748 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.4, among others.
4
Can CVE-2010-3748 be exploited remotely?
Yes, CVE-2010-3748 can be exploited remotely, allowing attackers to potentially execute arbitrary code.
5
Is CVE-2010-3748 present in RealPlayer Enterprise?
Yes, CVE-2010-3748 affects RealPlayer Enterprise version 2.1.2.