CVE-2010-4384: Input Validation
First published: Tue Dec 14 2010(Updated: )
Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Realnetworks Realplayer | =11.0 | |
| Realnetworks Realplayer | =11.0.4 | |
| Realnetworks Realplayer | =11.0.2 | |
| Realnetworks Realplayer | =11.0.3 | |
| Realnetworks Realplayer | =11.0.5 | |
| Realnetworks Realplayer | =11.1 | |
| Realnetworks Realplayer | =11.0.1 | |
| Realnetworks Realplayer | =2.1.2 | |
| Apple Mac OS X | ||
| Realnetworks Realplayer | =11.0.2.1744 | |
| Linux Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/realnetworks
- canonical/realnetworks realplayer
- version/realnetworks realplayer/11.0
- version/realnetworks realplayer/11.0.4
- version/realnetworks realplayer/11.0.2
- version/realnetworks realplayer/11.0.3
- version/realnetworks realplayer/11.0.5
- version/realnetworks realplayer/11.1
- version/realnetworks realplayer/11.0.1
- version/realnetworks realplayer/2.1.2
- vendor/apple
- canonical/apple mac os x
- version/realnetworks realplayer/11.0.2.1744
- vendor/linux
- canonical/linux linux kernel