CVE-2010-2998 Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file,...
HighCVSS 9.3
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.0.1 | No fix listed |
| realnetworks realplayer | = 11.0.2 | No fix listed |
| realnetworks realplayer | = 11.0.3 | No fix listed |
| realnetworks realplayer | = 11.0.4 | No fix listed |
| realnetworks realplayer | = 11.0.5 | No fix listed |
| realnetworks realplayer | = 11.1 | No fix listed |
| realnetworks realplayer sp | = 1.0.0 | No fix listed |
| realnetworks realplayer sp | = 1.0.1 | No fix listed |
References
- service.real.com vendor-advisory
- 44144 vdb-entry
- www.zerodayinitiative.com