CVE-2010-4379: Buffer Overflow

Published Dec 14, 2010

Updated

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Affected Software

20 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=2.1.2

Apple iOS and macOS

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4379?

CVE-2010-4379 has a moderate severity due to its potential for remote code execution.

How do I fix CVE-2010-4379?

To mitigate CVE-2010-4379, users should update RealPlayer and any affected software to the latest version.

What systems are impacted by CVE-2010-4379?

CVE-2010-4379 affects RealPlayer versions 11.0 to 11.1 and RealPlayer SP versions 1.0 to 1.1.4, among others.

Can I still use RealPlayer if it has CVE-2010-4379?

Using an affected version of RealPlayer poses security risks, and it’s recommended to update to a patched version.

What are the potential consequences of CVE-2010-4379?

Exploitation of CVE-2010-4379 may allow attackers to execute arbitrary code on the affected system.