NVD

Id
51392  
Name
CVE-2009-4247  
Description
Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0 and 1.0.1; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, 11.0, and 11.0.1; Linux RealPlayer 10, 11.0.0, and 11.0.1; and Helix Player 10.x, 11.0.0, and 11.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an ASM RuleBook with a large number of rules, related to an "array overflow."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-25  
Modified Date
2010-08-21  
Seq
2009-4247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260615 51392 CVE-2009-4247 [helix-client-dev] 20090828 CR: 249097 - Security fix - urgent CR requested  View
260616 51392 CVE-2009-4247 [protocol-cvs] 20090828 rtsp rtspclnt.cpp,1.244,1.245  View
260617 51392 CVE-2009-4247 oval:org.mitre.oval:def:10677  View
260618 51392 CVE-2009-4247 1023489  View
260619 51392 CVE-2009-4247 http://service.real.com/realplayer/security/01192010_player/en/  View
260620 51392 CVE-2009-4247 RHSA-2010:0094  View
260621 51392 CVE-2009-4247 37880  View
260622 51392 CVE-2009-4247 ADV-2010-0178  View
260623 51392 CVE-2009-4247 realplayer-rulebook-overflow(55802)  View
260624 51392 CVE-2009-4247 https://bugzilla.redhat.com/show_bug.cgi?id=561338  View
260625 51392 CVE-2009-4247 https://helixcommunity.org/viewcvs/protocol/rtsp/rtspclnt.cpp?view=log#rev1.245  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35273 JVNDB-2010-001053 Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 Realnetworks RealPlayer には、ASM RuleBook の処理に関する脆弱性が存在します。 CVE-2009-4247 41678 CVE-2009-4247 51392 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001053.html 2010-01-19 2010-07-23 View