CVE-2010-4389: Buffer Overflow
Published Dec 14, 2010
·Updated
Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer.
Affected Software
19 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.1.5
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer=11.0.2.1744
Linux Linux kernel
Event History
Dec 14, 2010
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4389?
CVE-2010-4389 has been assigned a high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2010-4389?
To fix CVE-2010-4389, update RealPlayer and RealPlayer SP to the latest versions that address this vulnerability.
3
Which versions of RealPlayer are affected by CVE-2010-4389?
CVE-2010-4389 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.5.
4
Can CVE-2010-4389 be exploited remotely?
Yes, CVE-2010-4389 can be exploited remotely through a heap-based buffer overflow in the cook codec.
5
What type of vulnerability is CVE-2010-4389?
CVE-2010-4389 is classified as a heap-based buffer overflow vulnerability.