Improper input validation in Apple Mac Os X
CVE-2010-4384
Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.059 (92.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Linux Linux_kernel
- Realnetworks Realplayer — versions 11.0.2, 11.0.5, 11.0.2.1744
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)