{"api_version":"1","generated_at":"2026-07-23T12:02:23+00:00","cve":"CVE-2010-4375","urls":{"html":"https://cve.report/CVE-2010-4375","api":"https://cve.report/api/cve/CVE-2010-4375.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4375","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4375"},"summary":{"title":"CVE-2010-4375","description":"Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-12-14 16:00:04","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-266","name":"http://www.zerodayinitiative.com/advisories/ZDI-10-266","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://service.real.com/realplayer/security/12102010_player/en/","name":"http://service.real.com/realplayer/security/12102010_player/en/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"RealPlayer and StarSearch by Real Official Homepage — Real.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024861","name":"http://www.securitytracker.com/id?1024861","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - RealPlayer Buffer Overflows and Memory Corruption Errors Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0981.html","name":"http://www.redhat.com/support/errata/RHSA-2010-0981.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4375","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4375","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4375","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"realnetworks","cpe5":"realplayer","cpe6":"11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:43:14.891Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"RHSA-2010:0981","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0981.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-266"},{"name":"1024861","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024861"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://service.real.com/realplayer/security/12102010_player/en/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-12-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-01-19T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"RHSA-2010:0981","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0981.html"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-266"},{"name":"1024861","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024861"},{"tags":["x_refsource_CONFIRM"],"url":"http://service.real.com/realplayer/security/12102010_player/en/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-4375","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"RHSA-2010:0981","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0981.html"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-10-266","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-10-266"},{"name":"1024861","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024861"},{"name":"http://service.real.com/realplayer/security/12102010_player/en/","refsource":"CONFIRM","url":"http://service.real.com/realplayer/security/12102010_player/en/"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-4375","datePublished":"2010-12-14T15:00:00.000Z","dateReserved":"2010-12-02T00:00:00.000Z","dateUpdated":"2024-08-07T03:43:14.891Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-14 16:00:04","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*","matchCriteriaId":"A8985B3B-BCC9-431D-9788-0C1949DF46E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9C7517C2-71A8-4223-9F9A-2FE5A2153B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"11B7CB5F-ACFA-439B-A9B7-54DA402A6029"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2A681B8-62F1-4B23-9E0B-39C61BE72F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F826B276-91E6-495E-B429-51B1C5ECB146"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0A732E6C-108F-447F-98B1-EA774A0537EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*","matchCriteriaId":"D03738C3-D659-488D-B285-64A496C0F1FB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*","matchCriteriaId":"A8985B3B-BCC9-431D-9788-0C1949DF46E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9C7517C2-71A8-4223-9F9A-2FE5A2153B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"11B7CB5F-ACFA-439B-A9B7-54DA402A6029"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2A681B8-62F1-4B23-9E0B-39C61BE72F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F826B276-91E6-495E-B429-51B1C5ECB146"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0A732E6C-108F-447F-98B1-EA774A0537EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*","matchCriteriaId":"D03738C3-D659-488D-B285-64A496C0F1FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11.0.2.1744:*:*:*:*:*:*:*","matchCriteriaId":"381DD10A-3459-40BD-88DB-2CC0BCA63F4C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4375","Ordinal":"1","Title":"CVE-2010-4375","CVE":"CVE-2010-4375","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4375","Ordinal":"1","NoteData":"Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream.","Type":"Description","Title":"CVE-2010-4375"},{"CveYear":"2010","CveId":"4375","Ordinal":"2","NoteData":"2010-12-14","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4375","Ordinal":"3","NoteData":"2011-01-19","Type":"Other","Title":"Modified"}]}}}