Vulnerability Description
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Realnetworks | Realplayer | 11.0 |
| Microsoft | Windows | All versions |
| Realnetworks | Realplayer Sp | 1.0.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/41096
- http://secunia.com/advisories/41154
- http://service.real.com/realplayer/security/08262010_player/en/Vendor Advisory
- http://www.securityfocus.com/archive/1/513383/100/0/threaded
- http://www.securitytracker.com/id?1024370
- http://www.vupen.com/english/advisories/2010/2216
- http://www.zerodayinitiative.com/advisories/ZDI-10-167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61423
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://secunia.com/advisories/41096
- http://secunia.com/advisories/41154
- http://service.real.com/realplayer/security/08262010_player/en/Vendor Advisory
- http://www.securityfocus.com/archive/1/513383/100/0/threaded
- http://www.securitytracker.com/id?1024370
- http://www.vupen.com/english/advisories/2010/2216
FAQ
What is CVE-2010-3000?
CVE-2010-3000 is a vulnerability with a CVSS score of 9.3 (HIGH). Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code v...
How severe is CVE-2010-3000?
CVE-2010-3000 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3000?
Check the references section above for vendor advisories and patch information. Affected products include: Realnetworks Realplayer, Microsoft Windows, Realnetworks Realplayer Sp.