CVE-2010-2998

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.02%

Published

Oct 18, 2010

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue.

Weaknesses (CWE)

CWE-20

Affected Products (9)

realnetworks · realplayervulnerable

realnetworks · realplayer_spvulnerable

References (6)

http://service.real.com/realplayer/security/10152010_player/en/

Vendor Advisory

http://www.securityfocus.com/bid/44144

http://www.zerodayinitiative.com/advisories/ZDI-10-209/

http://service.real.com/realplayer/security/10152010_player/en/

Vendor Advisory

http://www.securityfocus.com/bid/44144

http://www.zerodayinitiative.com/advisories/ZDI-10-209/

KEV Catalog EPSS Scores Vendors All CVEs