exploitDog

CVE-2010-4392

Опубликовано: 10 дек. 2010

Источник: redhat

CVSS2: 6.8

EPSS Низкий

Описание

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2010-4392
https://nvd.nist.gov/vuln/detail/CVE-2010-4392

Дополнительная информация

Статус:

Critical

https://bugzilla.redhat.com/show_bug.cgi?id=662772HelixPlayer multiple flaws (CVE-2010-2997, CVE-2010-4375, CVE-2010-4378, CVE-2010-4379, CVE-2010-4382, CVE-2010-4383, CVE-2010-4385, CVE-2010-4386, CVE-2010-4392, CVE-2010-4376)

EPSS

Процентиль: 93%

0.06422

Низкий

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2010-4392

nvd

больше 15 лет назад

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.

GHSA-fwwr-mh49-42xf

github

около 4 лет назад

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.

EPSS

Процентиль: 93%

0.06422

Низкий

6.8 Medium

CVSS2