CVE-2010-3000

no score yetEPSS 7.5%

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.

EPSS: 7.5% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2010-08-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:realplayer
realnetworks:realplayer_sp

References

http://secunia.com/advisories/41096
http://secunia.com/advisories/41154
http://service.real.com/realplayer/security/08262010_player/en/
http://www.securityfocus.com/archive/1/513383/100/0/threaded
http://www.securitytracker.com/id?1024370

Check your stack JSON