CVE-2010-3000

Description

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6651

https://exchange.xforce.ibmcloud.com/vulnerabilities/61423

http://www.zerodayinitiative.com/advisories/ZDI-10-167

http://www.vupen.com/english/advisories/2010/2216

http://www.securitytracker.com/id?1024370

http://www.securityfocus.com/archive/1/513383/100/0/threaded

http://service.real.com/realplayer/security/08262010_player/en/

http://secunia.com/advisories/41154

http://secunia.com/advisories/41096

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3