SecuritySpace - CVE-2010-2997

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-2997

Description: Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-2997
http://www.zerodayinitiative.com/advisories/ZDI-10-270
RedHat Security Advisories: RHSA-2010:0981
http://www.redhat.com/support/errata/RHSA-2010-0981.html
http://www.securitytracker.com/id?1024861

CVE ID:	CVE-2010-2997
Description:	Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2997 http://www.zerodayinitiative.com/advisories/ZDI-10-270 RedHat Security Advisories: RHSA-2010:0981 http://www.redhat.com/support/errata/RHSA-2010-0981.html http://www.securitytracker.com/id?1024861