NVD

Id
51390  
Name
CVE-2009-4245  
Description
Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a compressed GIF file, related to gifcodec.cpp and gifimage.cpp.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-25  
Modified Date
2010-08-21  
Seq
2009-4245  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260596 51390 CVE-2009-4245 [datatype-cvs] 20080722 image/gif/common gifcodec.cpp, 1.6, 1.7 gifimage.cpp, 1.5, 1.6  View
260597 51390 CVE-2009-4245 oval:org.mitre.oval:def:9998  View
260598 51390 CVE-2009-4245 1023489  View
260599 51390 CVE-2009-4245 http://service.real.com/realplayer/security/01192010_player/en/  View
260600 51390 CVE-2009-4245 RHSA-2010:0094  View
260601 51390 CVE-2009-4245 37880  View
260602 51390 CVE-2009-4245 ADV-2010-0178  View
260603 51390 CVE-2009-4245 realplayer-gifimage-bo(55800)  View
260604 51390 CVE-2009-4245 https://bugzilla.redhat.com/show_bug.cgi?id=561441  View
260605 51390 CVE-2009-4245 https://helixcommunity.org/viewcvs/datatype/image/gif/common/gifcodec.cpp?view=log#rev1.7  View
260606 51390 CVE-2009-4245 https://helixcommunity.org/viewcvs/datatype/image/gif/common/gifimage.cpp?view=log#rev1.6  View
260607 51390 CVE-2009-4245 https://helixcommunity.org/viewcvs/datatype/image/gif/common/pub/gifcodec.h?view=log#rev1.5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35270 JVNDB-2010-001050 Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 Realnetworks RealPlayer には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-4245 41676 CVE-2009-4245 51390 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001050.html 2010-01-19 2010-02-17 View