Unscored CVE-2010-4395 EUVD-2010-4364GHSA-wjpq-x66w-f4mj

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 …

Published Dec 14, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data.

References

69854 vdb-entry
1024861 vdb-entry
http://www.zerodayinitiative.com/advisories/ZDI-10-267
http://service.real.com/realplayer/security/12102010_player/en/