CVE-2010-0117

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.

Affected Products (13)

realnetworks · realplayervulnerable

microsoft · windows

realnetworks · realplayer_spvulnerable

microsoft · windows

References (16)

http://secunia.com/advisories/41096

http://secunia.com/advisories/41154

http://secunia.com/secunia_research/2010-5/

Vendor Advisory

http://service.real.com/realplayer/security/08262010_player/en/

Vendor Advisory

http://www.securitytracker.com/id?1024370

http://www.vupen.com/english/advisories/2010/2216

https://exchange.xforce.ibmcloud.com/vulnerabilities/61421

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7169

http://secunia.com/advisories/41096

http://secunia.com/advisories/41154

http://secunia.com/secunia_research/2010-5/

Vendor Advisory

http://service.real.com/realplayer/security/08262010_player/en/

Vendor Advisory

http://www.securitytracker.com/id?1024370

http://www.vupen.com/english/advisories/2010/2216

https://exchange.xforce.ibmcloud.com/vulnerabilities/61421

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7169