CVE-2010-4386: Buffer Overflow

Published Dec 14, 2010

Updated

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.

Affected Software

18 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4386?

CVE-2010-4386 is rated as a critical vulnerability due to its potential to allow remote code execution or denial of service.

How do I fix CVE-2010-4386?

To fix CVE-2010-4386, update RealPlayer to the latest version that addresses this vulnerability.

Which versions of RealPlayer are affected by CVE-2010-4386?

CVE-2010-4386 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.4.

Is Linux RealPlayer vulnerable to CVE-2010-4386?

Yes, Linux RealPlayer version 11.0.2.1744 is affected by CVE-2010-4386.

Can a crafted RealMedia video file exploit CVE-2010-4386?

Yes, a crafted RealMedia video file can exploit CVE-2010-4386 to trigger heap memory corruption.