Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4364 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T03:43:14.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting (XSS) attacks via the (1) html content and (2) rich_editor fields. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63443 - http://www.dadabik.org/index.php?function=show_c
erences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63443 - http://www.dadabik.org/index.php?function=show_changelog - http://www.securityfocus.com/bid/45035 - http://osvdb.org/69468 - http://secunia.com/advisories/42363
CVE ID: CVE-2010-4365 State: PUBLISHED Published: 2010-12-01T16:00:00Z Last Updated: 2024-09-17T02:21:19.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an alleventlist_more action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15610 - http://secunia.com/advisories/39836 - http://packetstormsecurity.org/files/view/96125/joomlaajax-sql.txt - http://www.securityfocus.com/bid/45050
CVE ID: CVE-2010-4366 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T03:43:14.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2) thread_description parameters in a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/69359 - http://www.exploit-db.com/exploits/15543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63255 - http://secunia.com/advisories/42206 - http://www.securityfocus.com/bid/44846
CVE ID: CVE-2010-4367 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:033 - http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-001.html - http://awstats.sourceforge.net/docs/awstats_changelog.txt
CVE ID: CVE-2010-4368 State: PUBLISHED Published: 2010-12-02T16:00:00Z Last Updated: 2024-09-16T19:39:59.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/870532 - http://awstats.sourceforge.net/docs/awstats_changelog.txt - http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-001.html
CVE ID: CVE-2010-4369 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0202 - http://www.securityfocus.com/bid/45210 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:033 - http://www.ubuntu.com/usn/USN-1047-1 - http://secunia.com/advisories/43004 - http://awstats.sourceforge.net/docs/awstats_changelog.txt
CVE ID: CVE-2010-4370 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42004 - http://forums.winamp.com/showthread.php?threadid=159785 - http://forums.winamp.com/showthread.php?t=324322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841 - http://www.securityfocus.com/archive/1/515388/100
org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11841 - http://www.securityfocus.com/archive/1/515388/100/0/threaded
CVE ID: CVE-2010-4371 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?threadid=159785 - http://forums.winamp.com/showthread.php?t=324322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12309
CVE ID: CVE-2010-4372 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?threadid=159785 - http://forums.winamp.com/showthread.php?t=324322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12358
CVE ID: CVE-2010-4373 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?threadid=159785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12425 - http://forums.winamp.com/showthread.php?t=324322
CVE ID: CVE-2010-4374 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?threadid=159785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12332 - http://forums.winamp.com/showthread.php?t=324322
CVE ID: CVE-2010-4375 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.zerodayinitiative.com/advisories/ZDI-10-266 - http://www.securitytracker.com/id?1024861 - http://service.real
http://www.zerodayinitiative.com/advisories/ZDI-10-266 - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4376 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://www.zerodayinitiative.com/ad
r.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://www.zerodayinitiative.com/advisories/ZDI-10-271 - http://www.securityfocus.com/bid/45411
CVE ID: CVE-2010-4377 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://www.zerodayinitiative.com/advisories/Z
024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://www.zerodayinitiative.com/advisories/ZDI-10-272
CVE ID: CVE-2010-4378 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2
deo stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://www.zerodayinitiative.com/advisories/ZDI-10-274
CVE ID: CVE-2010-4379 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/
com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4380 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4381 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4382 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_pl
HSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4383 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted RA5 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realp
edhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4384 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-268 - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytr
yinitiative.com/advisories/ZDI-10-268 - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4385 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_pla
SA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4386 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=883 - http://www.securitytracker.com/id?102
.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=883 - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4387 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://labs.idefense.com/intelli
cker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=884
CVE ID: CVE-2010-4388 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-276 - http://www.zer
st Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-276 - http://www.zerodayinitiative.com/advisories/ZDI-10-278 - http://osvdb.org/69859 - http://osvdb.org/69858 - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://osvdb.org/69857 - http://www.zerodayinitiative.com/advisories/ZDI-10-277
CVE ID: CVE-2010-4389 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69849 - http://www.securitytracker.com/id?1024861 - http://www.zerodayinitiative.com/advisories/ZDI-10-279 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4390 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69850 - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4391 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allows remote attackers to execute arbitrary code via a crafted value in an unspecified header field in an RMX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/ - http://www.zerodayinitiative.com/advisories/ZDI-10-281 - http://osvdb.org/69851
CVE ID: CVE-2010-4392 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-280 - http://www.redhat.com/support/errata/
Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-280 - http://www.redhat.com/support/errata/RHSA-2010-0981.html - http://www.securitytracker.com/id?1024861 - http://osvdb.org/69852 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-4393 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-07T03:43:14.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted header in an AVI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-033/ - http://osvdb.org/70682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64960 - http://www.vupen.com/english/advisories/2011/0240 - http://www.securityfocus.com/bid/4
cloud.com/vulnerabilities/64960 - http://www.vupen.com/english/advisories/2011/0240 - http://www.securityfocus.com/bid/46047 - http://service.real.com/realplayer/security/01272011_player/en/ - http://securitytracker.com/id?1024998 - http://secunia.com/advisories/43098
CVE ID: CVE-2010-4394 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T03:43:14.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://www.zerodayinitiative.com/advisories/ZDI-10-282 - http://service.real.com/realplayer/security/12102010_player/en/ - http://osvdb.org/69853