CVE-2009-4242
EUVD-2009-421125.01.2010, 19:30
Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| realnetworks | realplayer | 10.0 |
| realnetworks | realplayer | 10.5 |
| realnetworks | realplayer | 11.0 |
| realnetworks | realplayer | 11.0.1 |
| realnetworks | realplayer | 11.0.2 |
| realnetworks | realplayer | 11.0.3 |
| realnetworks | realplayer | 11.0.4 |
| realnetworks | realplayer | 11.0.5 |
| realnetworks | realplayer_enterprise | * |
| realnetworks | realplayer_sp | 1.0.0 |
| realnetworks | realplayer_sp | 1.0.1 |
| realnetworks | realplayer | 10.0 |
| realnetworks | realplayer | 10.1 |
| realnetworks | realplayer | 11.0 |
| realnetworks | realplayer | 11.0.1 |
| realnetworks | helix_player | 10.0 |
| realnetworks | helix_player | 11.0.0 |
| realnetworks | helix_player | 11.0.1 |
| realnetworks | realplayer | 10.0 |
| realnetworks | realplayer | 11.0.0 |
| realnetworks | realplayer | 11.0.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References