CVE-2010-4376: Buffer Overflow

Published Dec 14, 2010

Updated

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Affected Software

16 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

Apple iOS and macOS

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4376?

CVE-2010-4376 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2010-4376?

To mitigate CVE-2010-4376, upgrade RealPlayer to the latest version provided by RealNetworks.

Which versions of RealPlayer are affected by CVE-2010-4376?

CVE-2010-4376 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.1.

Can CVE-2010-4376 be exploited remotely?

Yes, CVE-2010-4376 can be exploited remotely via specially crafted GIF files.

What kind of attack can CVE-2010-4376 facilitate?

CVE-2010-4376 can facilitate arbitrary code execution on the affected systems.