CVE-2010-4377: Buffer Overflow

Published Dec 14, 2010

Updated

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

Affected Software

21 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.5

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=12.0.0.1444

Apple iOS and macOS

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4377?

CVE-2010-4377 has a CVSS score that indicates a high severity due to the potential for remote code execution.

How do I fix CVE-2010-4377?

To fix CVE-2010-4377, users should update their RealPlayer application to the latest version provided by RealNetworks.

What are the affected versions for CVE-2010-4377?

CVE-2010-4377 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.5.

Can CVE-2010-4377 lead to unauthorized access?

Yes, CVE-2010-4377 allows remote attackers to execute arbitrary code, potentially leading to unauthorized access.

What operating systems are impacted by CVE-2010-4377?

CVE-2010-4377 impacts RealPlayer on Windows, macOS, and Linux systems.