5
CVSSv2

CVE-2010-0417

Published: 18/02/2010 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption.

Vulnerable Product Search on Vulmon Subscribe to Product

realnetworks helix player 1.0.6

realnetworks realplayer

Vendor Advisories

Synopsis Critical: HelixPlayer security update Type/Severity Security Advisory: Critical Topic An updated HelixPlayer package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 4This update has been rated as having critical security impact by the RedHat Security Response Team ...