PT-2010-5466
CVE-2010-4389
·
Published
2010-12-10
·
Updated
2011-01-19
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
RealPlayer versions 11.0 through 11.1
RealPlayer SP versions 1.0 through 1.1.5
Linux RealPlayer version 11.0.2.1744
Description
The issue is related to a heap-based buffer overflow in the cook codec, allowing remote attackers to execute arbitrary code via unspecified data in the initialization buffer.
Recommendations
For RealPlayer versions 11.0 through 11.1, update to a version that fixes the cook codec initialization buffer overflow issue.
For RealPlayer SP versions 1.0 through 1.1.5, update to a version that fixes the cook codec initialization buffer overflow issue.
For Linux RealPlayer version 11.0.2.1744, update to a version that fixes the cook codec initialization buffer overflow issue.
Found an issue in the description? Have something to add? Feel free to write us 👾