Описание
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2010-0116
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61420
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7326
- http://secunia.com/advisories/41096
- http://secunia.com/advisories/41154
- http://secunia.com/secunia_research/2010-3
- http://service.real.com/realplayer/security/08262010_player/en
- http://www.securitytracker.com/id?1024370
- http://www.vupen.com/english/advisories/2010/2216
EPSS
Процентиль: 94%
0.12525
Средний
CVE ID
Связанные уязвимости
nvd
больше 15 лет назад
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.
EPSS
Процентиль: 94%
0.12525
Средний