NVD

Id
15649  
Name
CVE-2010-4394  
Description
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-14  
Modified Date
2011-01-19  
Seq
2010-4394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88553 15649 CVE-2010-4394 http://service.real.com/realplayer/security/12102010_player/en/  View
88554 15649 CVE-2010-4394 1024861  View
88555 15649 CVE-2010-4394 http://www.zerodayinitiative.com/advisories/ZDI-10-282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36827 JVNDB-2010-002607 RealNetworks RealPlayer の RealPix におけるヒープベースのバッファオーバーフローの脆弱性 RealNetworks RealPlayer には、RealPix の処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4394 46974 CVE-2010-4394 15649 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002607.html 2010-12-10 2011-01-12 View