CVE - CVE-2010-3000

CVE-ID
CVE-2010-3000	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20100826 ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities URL:http://www.securityfocus.com/archive/1/513383/100/0/threaded CONFIRM:http://service.real.com/realplayer/security/08262010_player/en/ MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-167 OVAL:oval:org.mitre.oval:def:6651 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6651 SECTRACK:1024370 URL:http://www.securitytracker.com/id?1024370 SECUNIA:41096 URL:http://secunia.com/advisories/41096 SECUNIA:41154 URL:http://secunia.com/advisories/41154 VUPEN:ADV-2010-2216 URL:~~http://www.vupen.com/english/advisories/2010/2216~~ (Obsolete source) XF:realplayer-parseknowntype-code-exec(61423) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/61423
Assigning CNA
MITRE Corporation
Date Record Created
20100813	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100813)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)