CVE-2010-4380: Buffer Overflow

Published Dec 14, 2010

Updated

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file.

Affected Software

17 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=2.1.2

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4380?

The severity of CVE-2010-4380 is rated as high due to the potential for remote code execution via a crafted SOUND file.

How do I fix CVE-2010-4380?

To fix CVE-2010-4380, you should update RealPlayer to the latest version provided by RealNetworks.

What versions of RealPlayer are affected by CVE-2010-4380?

CVE-2010-4380 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.4.

Can CVE-2010-4380 be exploited remotely?

Yes, CVE-2010-4380 can be exploited remotely by attackers via specially crafted SOUND files.

What impact does CVE-2010-4380 have on affected systems?

CVE-2010-4380 can lead to a heap-based buffer overflow, potentially allowing attackers to execute arbitrary code on the affected system.