CVE-2010-4381: Buffer Overflow

Published Dec 14, 2010

Updated

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.

Affected Software

19 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=2.1.2

RealNetworks RealPlayer=12.0.0.1444

Apple iOS and macOS

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4381?

CVE-2010-4381 is considered a critical vulnerability due to the potential for remote code execution via a crafted AAC file.

How do I fix CVE-2010-4381?

To fix CVE-2010-4381, users should update their RealPlayer to a version that addresses this vulnerability as specified by RealNetworks.

Which versions are affected by CVE-2010-4381?

CVE-2010-4381 affects RealPlayer versions from 11.0 to 11.1, RealPlayer SP versions 1.0 to 1.1.4, and certain versions of RealPlayer Enterprise and Mac RealPlayer.

Can CVE-2010-4381 be exploited remotely?

Yes, CVE-2010-4381 can be exploited remotely by attackers using a specially crafted AAC file.

What type of vulnerability is CVE-2010-4381?

CVE-2010-4381 is a heap-based buffer overflow vulnerability.