CVE-2011-10028: RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation or restrictions. This platform was sometimes referred to or otherwise known as RealArcade or Arcade Games and has since consolidated with RealNetworks' platform, GameHouse.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-10028?
CVE-2011-10028 is considered critical due to its potential for remote code execution.
How do I fix CVE-2011-10028?
To mitigate CVE-2011-10028, users should uninstall the vulnerable RealNetworks RealArcade application or update to a patched version if available.
What impacts can CVE-2011-10028 have on my system?
CVE-2011-10028 allows attackers to execute arbitrary commands on a victim's Windows machine, compromising system integrity and confidentiality.
Is CVE-2011-10028 still a threat today?
While the vulnerability was disclosed in 2011, systems still using the affected software remain exposed unless properly patched or removed.
Who is affected by CVE-2011-10028?
Users of RealNetworks RealArcade with the vulnerable ActiveX control version 2.6.0.445 are at risk from CVE-2011-10028.