| Vulnerability Name: | CVE-2010-0120 (CCN-61422) | ||||||||
| Assigned: | 2010-08-26 | ||||||||
| Published: | 2010-08-26 | ||||||||
| Updated: | 2017-09-19 | ||||||||
| Summary: | Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C) 6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2010-0120 Source: CCN Type: SA41096 RealPlayer SP Multiple Vulnerabilities Source: SECUNIA Type: UNKNOWN 41096 Source: CCN Type: SA41154 RealPlayer Multiple Vulnerabilities Source: SECUNIA Type: UNKNOWN 41154 Source: CCN Type: Secunia Research 27/08/2010 RealPlayer QCP Audio Content Parsing Buffer Overflow Source: MISC Type: Vendor Advisory http://secunia.com/secunia_research/2010-8/ Source: CCN Type: SECTRACK ID: 1024370 RealPlayer Bugs Let Remote Users Obtain Files and Execute Arbitrary Code Source: CCN Type: RealNetworks Web Site RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. Source: CONFIRM Type: Vendor Advisory http://service.real.com/realplayer/security/08262010_player/en/ Source: CCN Type: OSVDB ID: 67734 RealPlayer Multiple Products QCP Audio Content Size Value Overflow Source: SECTRACK Type: UNKNOWN 1024370 Source: VUPEN Type: UNKNOWN ADV-2010-2216 Source: XF Type: UNKNOWN realplayer-qcp-audio-bo(61422) Source: XF Type: UNKNOWN realplayer-qcp-audio-bo(61422) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:6807 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||