CVE-2010-0117

N/A Unknown

Published: August 30, 2010 Modified: April 29, 2026

Description

RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/41096

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/41154

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2010-5/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://service.real.com/realplayer/security/08262010_player/en/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securitytracker.com/id?1024370

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2010/2216

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/61421

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7169

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/41096