{"id":"CVE-2010-4382","aliases":["EUVD-2010-4351","GHSA-mccv-jqp5-6vx4","RHSA-2010:0981"],"status":"published","title":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP...","description":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03069,"percentile":0.87718,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2010-12-14T15:00:00Z","modified":"2026-06-26T10:14:59Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"HelixPlayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"HelixPlayer-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"HelixPlayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"HelixPlayer-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"HelixPlayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"HelixPlayer-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"HelixPlayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"HelixPlayer-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-3.el4_8.1"}]}],"bundled":10}],"products":[{"vendor":"realnetworks","product":"realplayer"},{"vendor":"realnetworks","product":"realplayer_sp"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2010-0981.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securitytracker.com/id?1024861","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://service.real.com/realplayer/security/12102010_player/en/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4382","tags":["advisory"]},{"url":"http://service.real.com/realplayer/security/12102010_player/en"},{"url":"https://github.com/advisories/GHSA-mccv-jqp5-6vx4"},{"url":"https://access.redhat.com/errata/RHSA-2010:0981","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://player.helixcommunity.org/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=662772","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0981.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2997","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2997","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2997","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4375","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4375","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4375","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4378","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4378","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4379","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4382","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4382","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4383","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4384","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4385","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4386","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4392","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4392","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-4382","description":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.","status":"published","published":"2010-12-14T15:00:00Z","modified":"2024-08-07T03:43:14.658Z","updated_at":"2026-11-02T14:33:28.50039Z"}],"euvd":[{"id":"EUVD-2010-4351","description":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.","status":"published","published":"2010-12-14T15:00:00Z","modified":"2024-08-07T03:43:14Z","updated_at":"2026-11-03T01:39:30.501544Z"}],"ghsa":[{"id":"GHSA-mccv-jqp5-6vx4","title":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP...","description":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.","status":"published","published":"2022-05-17T05:44:04Z","modified":"2025-04-11T03:42:56Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:07.282751Z"}],"nvd":[{"id":"CVE-2010-4382","description":"Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.","status":"published","published":"2010-12-14T16:00:04.57Z","modified":"2026-06-16T23:24:40.843Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:00.37682Z"}],"osv":[{"id":"RHSA-2010:0981","title":"Red Hat Security Advisory: HelixPlayer removal","status":"published","published":"2024-09-15T18:50:20Z","modified":"2026-06-26T10:14:59Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}