CVE-2010-4395: Buffer Overflow

Published Dec 14, 2010

Updated

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data.

Affected Software

19 affected components

RealNetworks RealPlayer=11.0

RealNetworks RealPlayer=11.0.4

RealNetworks RealPlayer=11.0.2

RealNetworks RealPlayer=11.0.3

RealNetworks RealPlayer=11.0.5

RealNetworks RealPlayer=11.1

RealNetworks RealPlayer=11.0.1

RealNetworks RealPlayer SP=1.0.1

RealNetworks RealPlayer SP=1.1.5

RealNetworks RealPlayer SP=1.1.3

RealNetworks RealPlayer SP=1.0.0

RealNetworks RealPlayer SP=1.0.2

RealNetworks RealPlayer SP=1.1

RealNetworks RealPlayer SP=1.1.2

RealNetworks RealPlayer SP=1.1.4

RealNetworks RealPlayer SP=1.1.1

RealNetworks RealPlayer SP=1.0.5

RealNetworks RealPlayer=11.0.2.1744

Linux Linux kernel

Event History

Dec 14, 2010

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4395?

CVE-2010-4395 has a severity rating of high due to its potential for remote code execution.

How do I fix CVE-2010-4395?

To fix CVE-2010-4395, users should update RealPlayer to the latest version provided by RealNetworks that addresses this vulnerability.

What software versions are affected by CVE-2010-4395?

CVE-2010-4395 affects RealPlayer versions 11.0 through 11.1 and RealPlayer SP versions 1.0 through 1.1.5.

Can CVE-2010-4395 allow attackers to execute code remotely?

Yes, CVE-2010-4395 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data.

What type of vulnerability is CVE-2010-4395 classified as?

CVE-2010-4395 is classified as a heap-based buffer overflow vulnerability.