← Database

CVE-2009-4244

CRITICAL CVSS: 9.3 Published: 2010-01-25 Modified: 2026-06-16

Description

Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.

Affected Platforms

Microsoft WindowsRealnetworks Realplayer EnterpriseRealnetworks Helix PlayerApple Mac Os XRealnetworks Realplayer SpRealnetworks Realplayer

Weakness Type

CWE-119

References