NVD

Id
51391  
Name
CVE-2009-4246  
Description
Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows user-assisted remote attackers to execute arbitrary code via a malformed .RJS skin file that contains a web.xmb file with crafted length values.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-25  
Modified Date
2010-01-26  
Seq
2009-4246  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260608 51391 CVE-2009-4246 1023489  View
260609 51391 CVE-2009-4246 http://service.real.com/realplayer/security/01192010_player/en/  View
260610 51391 CVE-2009-4246 20100121 ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerability  View
260611 51391 CVE-2009-4246 37880  View
260612 51391 CVE-2009-4246 ADV-2010-0178  View
260613 51391 CVE-2009-4246 http://www.zerodayinitiative.com/advisories/ZDI-10-010/  View
260614 51391 CVE-2009-4246 realplayer-skin-bo(55799)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35272 JVNDB-2010-001052 Realnetworks RealPlayer における任意のコードを実行される脆弱性 Realnetworks RealPlayer には、任意のコードを実行される脆弱性が存在します。 CVE-2009-4246 41677 CVE-2009-4246 51391 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001052.html 2010-01-19 2010-02-17 View