CVE-2010-4384: Input Validation
First published: Tue Dec 14 2010(Updated: )
Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RealPlayer | =11.0 | |
| RealPlayer | =11.0.4 | |
| RealPlayer | =11.0.2 | |
| RealPlayer | =11.0.3 | |
| RealPlayer | =11.0.5 | |
| RealPlayer | =11.1 | |
| RealPlayer | =11.0.1 | |
| RealPlayer | =2.1.2 | |
| Apple iOS and macOS | ||
| RealPlayer | =11.0.2.1744 | |
| Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-4384?
CVE-2010-4384 has a critical severity rating as it allows remote code execution.
How do I fix CVE-2010-4384?
To fix CVE-2010-4384, you should update RealPlayer to the latest version provided by RealNetworks.
Which versions are affected by CVE-2010-4384?
CVE-2010-4384 affects RealPlayer versions 11.0 through 11.1 and RealPlayer Enterprise 2.1.2.
Can I confirm if my system is vulnerable to CVE-2010-4384?
You can confirm vulnerability by checking if your version of RealPlayer is within the affected versions listed for CVE-2010-4384.
Are there any workarounds for CVE-2010-4384?
There are no recommended workarounds for CVE-2010-4384, and users should upgrade to eliminate the vulnerability.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/realnetworks
- canonical/realplayer
- version/realplayer/11.0
- version/realplayer/11.0.4
- version/realplayer/11.0.2
- version/realplayer/11.0.3
- version/realplayer/11.0.5
- version/realplayer/11.1
- version/realplayer/11.0.1
- version/realplayer/2.1.2
- vendor/apple
- canonical/apple ios and macos
- version/realplayer/11.0.2.1744
- vendor/linux
- canonical/linux kernel