9.3

CVE-2010-2999

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed MLLT atom in an AAC file.

Data is provided by the National Vulnerability Database (NVD)
Realnetworks ≫ Realplayer Version11.0
Realnetworks ≫ Realplayer Version11.0.1
Realnetworks ≫ Realplayer Version11.0.2
Realnetworks ≫ Realplayer Version11.0.3
Realnetworks ≫ Realplayer Version11.0.4
Realnetworks ≫ Realplayer Version11.0.5
Realnetworks ≫ Realplayer Version11.1
Realnetworks ≫ Realplayer Sp Version1.0.0
Realnetworks ≫ Realplayer Sp Version1.0.1
Realnetworks ≫ Realplayer Version11.0
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.0.1
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.0.2
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.0.3
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.0.4
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.0.5
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.1
   Apple ≫ macOS X
Realnetworks ≫ Realplayer Version11.0.2.1744
   Linux ≫ Linux Kernel
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.47% 0.838
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C