SecuritySpace - CVE-2010-4378

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-4378

Description: The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-4378
http://www.zerodayinitiative.com/advisories/ZDI-10-274
RedHat Security Advisories: RHSA-2010:0981
http://www.redhat.com/support/errata/RHSA-2010-0981.html
http://www.securitytracker.com/id?1024861

CVE ID:	CVE-2010-4378
Description:	The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4378 http://www.zerodayinitiative.com/advisories/ZDI-10-274 RedHat Security Advisories: RHSA-2010:0981 http://www.redhat.com/support/errata/RHSA-2010-0981.html http://www.securitytracker.com/id?1024861