CVE-2010-4378: Buffer Overflow
First published: Tue Dec 14 2010(Updated: )
The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Realnetworks Realplayer | =11.0 | |
| Realnetworks Realplayer | =11.0.4 | |
| Realnetworks Realplayer | =11.0.2 | |
| Realnetworks Realplayer | =11.0.3 | |
| Realnetworks Realplayer | =11.0.5 | |
| Realnetworks Realplayer | =11.1 | |
| Realnetworks Realplayer | =11.0.1 | |
| Realnetworks Realplayer Sp | =1.0.1 | |
| Realnetworks Realplayer Sp | =1.1.5 | |
| Realnetworks Realplayer Sp | =1.1.3 | |
| Realnetworks Realplayer Sp | =1.0.0 | |
| Realnetworks Realplayer Sp | =1.0.2 | |
| Realnetworks Realplayer Sp | =1.1 | |
| Realnetworks Realplayer Sp | =1.1.2 | |
| Realnetworks Realplayer Sp | =1.1.4 | |
| Realnetworks Realplayer Sp | =1.1.1 | |
| Realnetworks Realplayer Sp | =1.0.5 | |
| Realnetworks Realplayer | =2.1.3 | |
| Realnetworks Realplayer | =2.1.2 | |
| Realnetworks Realplayer | =11.0.2.1744 | |
| Linux Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- vendor/realnetworks
- canonical/realnetworks realplayer
- version/realnetworks realplayer/11.0
- version/realnetworks realplayer/11.0.4
- version/realnetworks realplayer/11.0.2
- version/realnetworks realplayer/11.0.3
- version/realnetworks realplayer/11.0.5
- version/realnetworks realplayer/11.1
- version/realnetworks realplayer/11.0.1
- canonical/realnetworks realplayer sp
- version/realnetworks realplayer sp/1.0.1
- version/realnetworks realplayer sp/1.1.5
- version/realnetworks realplayer sp/1.1.3
- version/realnetworks realplayer sp/1.0.0
- version/realnetworks realplayer sp/1.0.2
- version/realnetworks realplayer sp/1.1
- version/realnetworks realplayer sp/1.1.2
- version/realnetworks realplayer sp/1.1.4
- version/realnetworks realplayer sp/1.1.1
- version/realnetworks realplayer sp/1.0.5
- version/realnetworks realplayer/2.1.3
- version/realnetworks realplayer/2.1.2
- version/realnetworks realplayer/11.0.2.1744
- vendor/linux
- canonical/linux linux kernel