CVE-2009-4244
published 2010-01-25CVE-2009-4244: Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer…
PriorityP351critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
7.26%
93.6th percentile
Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer_sp | — | — |
| realnetworks | realplayer_sp | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4qm6-973j-4qvf: Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10
ghsa_unreviewed·2022-05-02
CVE-2009-4244 [HIGH] CWE-119 GHSA-4qm6-973j-4qvf: Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10
Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.
Red Hat
RealPlayer: multiple security issues (01192010_player)
vendor_redhat·2010-01-19·CVSS 9.3
CVE-2009-4244 [CRITICAL] RealPlayer: multiple security issues (01192010_player)
RealPlayer: multiple security issues (01192010_player)
Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/38218http://securitytracker.com/id?1023489http://service.real.com/realplayer/security/01192010_player/en/http://www.securityfocus.com/archive/1/509098/100/0/threadedhttp://www.securityfocus.com/bid/37880http://www.vupen.com/english/advisories/2010/0178http://www.zerodayinitiative.com/advisories/ZDI-10-008/https://exchange.xforce.ibmcloud.com/vulnerabilities/55797http://secunia.com/advisories/38218http://securitytracker.com/id?1023489http://service.real.com/realplayer/security/01192010_player/en/http://www.securityfocus.com/archive/1/509098/100/0/threadedhttp://www.securityfocus.com/bid/37880http://www.vupen.com/english/advisories/2010/0178http://www.zerodayinitiative.com/advisories/ZDI-10-008/https://exchange.xforce.ibmcloud.com/vulnerabilities/55797
2010-01-25
Published