CVE-2010-4390: Buffer Overflow

Published Dec 14, 2010

Updated

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file.

Affected Software

19 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.5

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4390?

CVE-2010-4390 is considered a high-severity vulnerability due to the potential for remote code execution through heap-based buffer overflows.

How do I fix CVE-2010-4390?

To fix CVE-2010-4390, users should upgrade to the latest version of RealPlayer or apply patches provided by RealNetworks.

Which versions of RealPlayer are affected by CVE-2010-4390?

Affected versions include RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5.

What type of attack does CVE-2010-4390 enable?

CVE-2010-4390 allows attackers to execute arbitrary code remotely by exploiting crafted headers in IVR files.

What software does CVE-2010-4390 affect?

CVE-2010-4390 affects RealNetworks RealPlayer and RealNetworks RealPlayer SP software.