NVD

Id
15092  
Name
CVE-2010-3747  
Description
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-18  
Modified Date
2011-09-21  
Seq
2010-3747  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84454 15092 CVE-2010-3747 8147  View
84455 15092 CVE-2010-3747 http://service.real.com/realplayer/security/10152010_player/en/  View
84456 15092 CVE-2010-3747 44144  View
84457 15092 CVE-2010-3747 http://www.zerodayinitiative.com/advisories/ZDI-10-210/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36493 JVNDB-2010-002273 RealNetworks RealPlayer の ActiveX コントロールにおける任意のコードを実行される脆弱性 RealNetworks RealPlayer の ActiveX コントロールには、CDDA URI の構文解析の際、オブジェクトコンポーネントを適切に初期化しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3747 46327 CVE-2010-3747 15092 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002273.html 2010-10-15 2010-11-09 View