SecuritySpace - CVE-2010-4392

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-4392

Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-4392
http://www.zerodayinitiative.com/advisories/ZDI-10-280
http://osvdb.org/69852
RedHat Security Advisories: RHSA-2010:0981
http://www.redhat.com/support/errata/RHSA-2010-0981.html
http://www.securitytracker.com/id?1024861

CVE ID:	CVE-2010-4392
Description:	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4392 http://www.zerodayinitiative.com/advisories/ZDI-10-280 http://osvdb.org/69852 RedHat Security Advisories: RHSA-2010:0981 http://www.redhat.com/support/errata/RHSA-2010-0981.html http://www.securitytracker.com/id?1024861