Real Networks RealPlayer 'IVR' File Handling Multiple Heap Overflow Vulnerabilities

BID:45448

Info

Real Networks RealPlayer 'IVR' File Handling Multiple Heap Overflow Vulnerabilities

Bugtraq ID: 45448
Class: Boundary Condition Error
CVE: CVE-2010-4390
Remote: Yes
Local: No
Published: Dec 10 2010 12:00AM
Updated: Dec 10 2010 12:00AM
Credit: Aaron Portnoy and Logan Brown of TippingPoint DVLabs and Team lollersk8erz
Vulnerable: RealNetworks RealPlayer SP 1.1.5
RealNetworks RealPlayer SP 1.1.4
RealNetworks RealPlayer SP 1.0.5
RealNetworks RealPlayer SP 1.0.2
RealNetworks RealPlayer SP 1.0.1
RealNetworks RealPlayer SP 1.0
RealNetworks RealPlayer SP 1.1.3
RealNetworks RealPlayer SP 1.1.2
RealNetworks RealPlayer SP 1.1.1
RealNetworks RealPlayer SP 1.1
RealNetworks RealPlayer for Linux 11.0.2.1744
RealNetworks RealPlayer 11 Beta 6.0.14 .550
RealNetworks RealPlayer 10 for Linux 10.1 .3114
RealNetworks RealPlayer 10 for Linux 10.0.9
RealNetworks RealPlayer 10 for Linux 10.0.8
RealNetworks RealPlayer 10 for Linux 10.0.7
RealNetworks RealPlayer 10 for Linux 10.0.6
RealNetworks RealPlayer 10 for Linux 10.0.5
RealNetworks RealPlayer 10 for Linux 10.0.4
RealNetworks RealPlayer 10 for Linux 10.0.3
RealNetworks RealPlayer 10 for Linux 10.0.2
RealNetworks RealPlayer 10 for Linux 10.0.1
RealNetworks RealPlayer 10 for Linux
RealNetworks RealPlayer 11.0.5
RealNetworks RealPlayer 11.0.4
RealNetworks RealPlayer 11.0.3
RealNetworks RealPlayer 11.0.2
RealNetworks RealPlayer 11.0.1
RealNetworks RealPlayer 11.1
RealNetworks RealPlayer 11 Beta
RealNetworks RealPlayer 11
Not Vulnerable: RealNetworks RealPlayer for Linux 11.0.2.2315
RealNetworks RealPlayer 14.0.1

Solution / Fix

Real Networks RealPlayer 'IVR' File Handling Multiple Heap Overflow Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report