NVD

Id
14427  
Name
CVE-2010-2997  
Description
Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-14  
Modified Date
2011-01-26  
Seq
2010-2997  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79870 14427 CVE-2010-2997 http://service.real.com/realplayer/security/12102010_player/en/  View
79871 14427 CVE-2010-2997 RHSA-2010:0981  View
79872 14427 CVE-2010-2997 1024861  View
79873 14427 CVE-2010-2997 http://www.zerodayinitiative.com/advisories/ZDI-10-270  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36804 JVNDB-2010-002584 RealNetworks RealPlayer における任意のコードを実行される脆弱性 RealNetworks RealPlayer には、SMIL ファイルフォーマットに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-2997 45577 CVE-2010-2997 14427 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002584.html 2010-12-10 2011-01-07 View