CVE-2010-4392: Buffer Overflow
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4392?
CVE-2010-4392 has a severity rating of high due to the potential for remote code execution.
How do I fix CVE-2010-4392?
To fix CVE-2010-4392, update to the latest version of RealPlayer or RealPlayer SP that addresses this vulnerability.
Which versions of RealPlayer are affected by CVE-2010-4392?
CVE-2010-4392 affects RealPlayer versions 11.0 to 11.1, RealPlayer SP versions 1.0 to 1.1.5, and specific enterprise editions.
Can CVE-2010-4392 be exploited remotely?
Yes, CVE-2010-4392 can be exploited remotely by attackers through crafted ImageMap data.
What types of attacks are possible due to CVE-2010-4392?
CVE-2010-4392 allows attackers to execute arbitrary code, which could lead to system compromise.