Buffer overflow in Linux Kernel

CVE-2010-4382

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.

Vulnerability class: Buffer Overflow

EPSS: 0.031 (86.5th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
Realnetworks Realplayer — versions 11.0.2, 11.0.5, 11.0.2.1744
Realnetworks Realplayer_sp — versions 1.0.1, 1.0.0, 1.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)