CVE-2010-2996 Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file.
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.1 | No fix listed |
References
- 41154 third-party-advisory
- service.real.com vendor-advisory
- 20100826 ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability mailing-list
- 1024370 vdb-entry
- ADV-2010-2216 vdb-entry
- www.zerodayinitiative.com
- realplayer-ivr-code-exec(61425) vdb-entry
- oval:org.mitre.oval:def:6703 signature vdb-entry