CVE

Id
46333  
CVE No.
CVE-2010-3749  
Status
Candidate  
Description
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a " (double quote) in an argument to the RecordClip method, aka "parameter injection."  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505165 46333 CVE-2010-3749 EXPLOIT-DB:15991  View
505166 46333 CVE-2010-3749 URL:http://www.exploit-db.com/exploits/15991  View
505167 46333 CVE-2010-3749 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-211/  View
505168 46333 CVE-2010-3749 CONFIRM:http://service.real.com/realplayer/security/10152010_player/en/  View
505169 46333 CVE-2010-3749 BID:44144  View
505170 46333 CVE-2010-3749 URL:http://www.securityfocus.com/bid/44144  View
505171 46333 CVE-2010-3749 BID:44443  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36711 JVNDB-2010-002491 Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性 Openswan のクライアント内にある programs/pluto/xauth.c には、任意のコマンドを実行される脆弱性が存在します。 CVE-2010-3753 46333 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002491.html  View