CVE-2010-3000 json
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4…
published 2010-08-30 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-3002
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.5%
- EPSS 7.5% chance of exploitation in 30 days, percentile 94%
- public exploits
- 1
- Exploit-DB
Summary
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.
Timeline
- Published
- First public exploit (EDB-14992)
Exploit prediction
7.50% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-14992 RealPlayer - FLV Parsing Integer Overflow dos, 2010-09-13
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-189 Numeric Errors
References
-
service.real.com
/realplayer/security/08262010_player/en/
vendor-advisory
-
vupen.com
/english/advisories/2010/2216
vdb-entry
-
secunia.com
/advisories/41096
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/61423
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6651
vdb-entry, signature
-
securityfocus.com
/archive/1/513383/100/0/threaded
mailing-list
-
securitytracker.com
/id?1024370
vdb-entry
- zerodayinitiative.com /advisories/ZDI-10-167
-
secunia.com
/advisories/41154
third-party-advisory
Sources
- CVE List CVE-2010-3000
- NVD CVE-2010-3000
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.