REDHAT-BUG-561441: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4245 to the following vulnerability:
Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to have an unspecified impact via a compressed GIF file.
References: http://service.real.com/realplayer/security/01192010player/en/ http://xforce.iss.net/xforce/xfdb/55800
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-561441?
The severity of REDHAT-BUG-561441 is considered high due to the potential for a heap-based buffer overflow leading to remote code execution.
How do I fix REDHAT-BUG-561441?
To fix REDHAT-BUG-561441, users should update RealNetworks RealPlayer and Helix Player to the latest patched versions.
Which versions are affected by REDHAT-BUG-561441?
REDHAT-BUG-561441 affects RealPlayer versions 6.0.12.1040 to 6.0.12.1741 and RealPlayer 11 versions 11.0.0 to 11.0.4.
What platforms are impacted by REDHAT-BUG-561441?
The impacted platforms include RealNetworks RealPlayer, RealPlayer Enterprise, and Helix Player on Linux.
Is there a workaround for REDHAT-BUG-561441?
Temporary workarounds for REDHAT-BUG-561441 may include disabling the use of RealPlayer in high-security environments until updates are applied.