CVE-2009-4243 RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Play...
HighCVSS 9.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses HTTP chunked transfer coding, related to an "overflow."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 10.0 | No fix listed |
| realnetworks realplayer | = 10.5 | No fix listed |
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.0.1 | No fix listed |
| realnetworks realplayer | = 11.0.2 | No fix listed |
| realnetworks realplayer | = 11.0.3 | No fix listed |
| realnetworks realplayer | = 11.0.4 | No fix listed |
| realnetworks realplayer | = 11.0.5 | No fix listed |
| realnetworks realplayer | = 10.1 | No fix listed |
| realnetworks realplayer | = 11.0.0 | No fix listed |
| realnetworks realplayer enterprise | All versions | No fix listed |
| realnetworks realplayer sp | = 1.0.0 | No fix listed |
| realnetworks realplayer sp | = 1.0.1 | No fix listed |
| realnetworks helix player | = 10.0 | No fix listed |
| realnetworks helix player | = 11.0.0 | No fix listed |
| realnetworks helix player | = 11.0.1 | No fix listed |
References
- 61967 vdb-entry
- 38218 third-party-advisory vendor-advisory
- 1023489 patch vdb-entry
- service.real.com patch vendor-advisory
- 37880 vdb-entry
- ADV-2010-0178 patch vdb-entry vendor-advisory
- realplayer-httpchunk-bo(55796) vdb-entry