Vulnerability in Apple Mac Os X

CVE-2010-0125

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.

EPSS: 0.016 (72.7th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x
Realnetworks Realplayer — versions 11.0.2, 11.0.5, 12.0.0.1444
Realnetworks Realplayer_sp — versions 1.0.1, 1.0.0, 1.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_SECTRACK)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)