CVE-2010-4382: Buffer Overflow
First published: Tue Dec 14 2010(Updated: )
Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RealPlayer | =11.0 | |
| RealPlayer | =11.0.4 | |
| RealPlayer | =11.0.2 | |
| RealPlayer | =11.0.3 | |
| RealPlayer | =11.0.5 | |
| RealPlayer | =11.1 | |
| RealPlayer | =11.0.1 | |
| RealNetworks RealPlayer SP | =1.0.1 | |
| RealNetworks RealPlayer SP | =1.1.3 | |
| RealNetworks RealPlayer SP | =1.0.0 | |
| RealNetworks RealPlayer SP | =1.0.2 | |
| RealNetworks RealPlayer SP | =1.1 | |
| RealNetworks RealPlayer SP | =1.1.2 | |
| RealNetworks RealPlayer SP | =1.1.4 | |
| RealNetworks RealPlayer SP | =1.1.1 | |
| RealNetworks RealPlayer SP | =1.0.5 | |
| RealPlayer | =2.1.2 | |
| RealPlayer | =1.0.0 | |
| RealPlayer | =1.0.1 | |
| RealPlayer | =1.0.2 | |
| RealPlayer | =1.0.5 | |
| RealPlayer | =1.1 | |
| RealPlayer | =1.1.1 | |
| RealPlayer | =1.1.2 | |
| RealPlayer | =1.1.3 | |
| RealPlayer | =1.1.4 | |
| RealPlayer | =11.0.2.1744 | |
| Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-4382?
CVE-2010-4382 is classified as a critical vulnerability due to its potential for remote code execution through heap-based buffer overflows.
How do I fix CVE-2010-4382?
To mitigate CVE-2010-4382, update RealPlayer and RealPlayer SP to the latest available versions provided by RealNetworks.
Which versions of RealPlayer are affected by CVE-2010-4382?
CVE-2010-4382 affects RealPlayer versions from 11.0 to 11.1, including various sub-versions.
Can CVE-2010-4382 affect Linux users?
Yes, CVE-2010-4382 can impact Linux users running RealPlayer versions 11.0.2.1744 and possibly other versions of HelixPlayer.
What impact does CVE-2010-4382 have on systems?
CVE-2010-4382 could allow remote attackers to execute arbitrary code, leading to unauthorized access or system compromise.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- vendor/realnetworks
- canonical/realplayer
- version/realplayer/11.0
- version/realplayer/11.0.4
- version/realplayer/11.0.2
- version/realplayer/11.0.3
- version/realplayer/11.0.5
- version/realplayer/11.1
- version/realplayer/11.0.1
- canonical/realnetworks realplayer sp
- version/realnetworks realplayer sp/1.0.1
- version/realnetworks realplayer sp/1.1.3
- version/realnetworks realplayer sp/1.0.0
- version/realnetworks realplayer sp/1.0.2
- version/realnetworks realplayer sp/1.1
- version/realnetworks realplayer sp/1.1.2
- version/realnetworks realplayer sp/1.1.4
- version/realnetworks realplayer sp/1.1.1
- version/realnetworks realplayer sp/1.0.5
- version/realplayer/2.1.2
- version/realplayer/1.0.0
- version/realplayer/1.0.1
- version/realplayer/1.0.2
- version/realplayer/1.0.5
- version/realplayer/1.1
- version/realplayer/1.1.1
- version/realplayer/1.1.2
- version/realplayer/1.1.3
- version/realplayer/1.1.4
- version/realplayer/11.0.2.1744
- vendor/linux
- canonical/linux kernel