PT-2010-5467 · Realnetworks · Linux Realplayer+2

Publicado 2010-12-14 · Atualizado 2011-01-19 · CVE-2010-4390

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 Linux RealPlayer version 11.0.2.1744

Description The issue is related to multiple heap-based buffer overflows that can be triggered by a crafted header in an IVR file, allowing remote attackers to have an unspecified impact.

Recommendations For RealPlayer versions 11.0 through 11.1, update to a version outside of this range to resolve the issue. For RealPlayer SP versions 1.0 through 1.1.5, update to a version outside of this range to resolve the issue. For Linux RealPlayer version 11.0.2.1744, update to a version newer than 11.0.2.1744 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-4390

Produtos afetados

Linux Realplayer

Realplayer

Realplayer Sp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4390 · Nota de Segurança
• http://osvdb.org/69850 · Nota
• http://service.real.com/realplayer/security/12102010_player/en · Aviso do Fabricante
• http://securitytracker.com/id?1024861 · Nota