Unscored CVE-2010-2998 EUVD-2010-3000GHSA-w86r-9g3m-3pvh

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbit…

Published Oct 18, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue.

References

44144 vdb-entry
http://www.zerodayinitiative.com/advisories/ZDI-10-209/
http://service.real.com/realplayer/security/10152010_player/en/