CVE-2010-4387: Buffer Overflow

Published Dec 14, 2010

Updated

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Affected Software

20 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=12.0.0.1444

Apple iOS and macOS

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4387?

CVE-2010-4387 has a high severity due to its potential to allow remote code execution or cause denial of service through heap memory corruption.

How do I fix CVE-2010-4387?

To fix CVE-2010-4387, update RealPlayer to a version that contains the security patch addressing this vulnerability.

Which versions are affected by CVE-2010-4387?

CVE-2010-4387 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.4.

What types of attacks can exploit CVE-2010-4387?

CVE-2010-4387 can be exploited through crafted audio streams, leading to arbitrary code execution or application crashes.

Can CVE-2010-4387 affect Linux systems?

Yes, CVE-2010-4387 can affect Linux systems running vulnerable versions of RealPlayer.