← Database

CVE-2010-2998

CRITICAL CVSS: 9.3 Published: 2010-10-19 Modified: 2026-06-16

Description

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue.

Affected Platforms

Realnetworks Realplayer SpRealnetworks Realplayer

Weakness Type

CWE-20

References