CVE-2010-3000 Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code v...
HighCVSS 9.3
EPSS 7.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.1 | No fix listed |
| realnetworks realplayer sp | = 1.0.0 | No fix listed |
| realnetworks realplayer sp | = 1.0.1 | No fix listed |
| realnetworks realplayer sp | = 1.0.2 | No fix listed |
| realnetworks realplayer sp | = 1.0.5 | No fix listed |
| realnetworks realplayer sp | = 1.1 | No fix listed |
| realnetworks realplayer sp | = 1.1.1 | No fix listed |
| realnetworks realplayer sp | = 1.1.2 | No fix listed |
| realnetworks realplayer sp | = 1.1.3 | No fix listed |
| realnetworks realplayer sp | = 1.1.4 | No fix listed |
References
- 41096 third-party-advisory
- 41154 third-party-advisory
- service.real.com vendor-advisory
- 20100826 ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities mailing-list
- 1024370 vdb-entry
- ADV-2010-2216 vdb-entry
- www.zerodayinitiative.com
- realplayer-parseknowntype-code-exec(61423) vdb-entry
- oval:org.mitre.oval:def:6651 signature vdb-entry