cbcvebase.
CVE-2010-0125
published 2010-12-14

CVE-2010-0125: RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not…

PriorityP339critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
1.56%
72.1th percentile
RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.

Affected

18 ranges
VendorProductVersion rangeFixed in
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
realnetworksrealplayer_sp——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.