exploitDog

CVE-2010-4378

Опубликовано: 10 дек. 2010

Источник: redhat

CVSS2: 6.8

EPSS Низкий

Описание

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2010-4378
https://nvd.nist.gov/vuln/detail/CVE-2010-4378

Дополнительная информация

Статус:

Critical

https://bugzilla.redhat.com/show_bug.cgi?id=662772HelixPlayer multiple flaws (CVE-2010-2997, CVE-2010-4375, CVE-2010-4378, CVE-2010-4379, CVE-2010-4382, CVE-2010-4383, CVE-2010-4385, CVE-2010-4386, CVE-2010-4392, CVE-2010-4376)

EPSS

Процентиль: 92%

0.05792

Низкий

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2010-4378

nvd

больше 15 лет назад

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.

GHSA-823r-m433-5jp9

github

около 4 лет назад

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.

EPSS

Процентиль: 92%

0.05792

Низкий

6.8 Medium

CVSS2