Unscored CVE-2010-4394 EUVD-2010-4363GHSA-96gg-2fqg-g6xm

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to ex…

Published Dec 14, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.

References

1024861 vdb-entry
http://www.zerodayinitiative.com/advisories/ZDI-10-282
http://service.real.com/realplayer/security/12102010_player/en/
69853 vdb-entry