CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-4388

The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-4388

Realnetworks » Realplayer » Version: 11.0

cpe:2.3:a:realnetworks:realplayer:11.0
Realnetworks » Realplayer » Version: 11.0.1

cpe:2.3:a:realnetworks:realplayer:11.0.1
Realnetworks » Realplayer » Version: 11.0.2

cpe:2.3:a:realnetworks:realplayer:11.0.2
Realnetworks » Realplayer » Version: 11.0.3

cpe:2.3:a:realnetworks:realplayer:11.0.3
Realnetworks » Realplayer » Version: 11.0.4

cpe:2.3:a:realnetworks:realplayer:11.0.4
Realnetworks » Realplayer » Version: 11.0.5

cpe:2.3:a:realnetworks:realplayer:11.0.5
Realnetworks » Realplayer » Version: 11.1

cpe:2.3:a:realnetworks:realplayer:11.1
Realnetworks » Realplayer » Version: 2.1.2

cpe:2.3:a:realnetworks:realplayer:2.1.2
Realnetworks » Realplayer » Version: 2.1.3

cpe:2.3:a:realnetworks:realplayer:2.1.3
Realnetworks » Realplayer Sp » Version: 1.0.0

cpe:2.3:a:realnetworks:realplayer_sp:1.0.0
Realnetworks » Realplayer Sp » Version: 1.0.1

cpe:2.3:a:realnetworks:realplayer_sp:1.0.1
Realnetworks » Realplayer Sp » Version: 1.0.2

cpe:2.3:a:realnetworks:realplayer_sp:1.0.2
Realnetworks » Realplayer Sp » Version: 1.0.5

cpe:2.3:a:realnetworks:realplayer_sp:1.0.5
Realnetworks » Realplayer Sp » Version: 1.1

cpe:2.3:a:realnetworks:realplayer_sp:1.1
Realnetworks » Realplayer Sp » Version: 1.1.1

cpe:2.3:a:realnetworks:realplayer_sp:1.1.1
Realnetworks » Realplayer Sp » Version: 1.1.2

cpe:2.3:a:realnetworks:realplayer_sp:1.1.2
Realnetworks » Realplayer Sp » Version: 1.1.3

cpe:2.3:a:realnetworks:realplayer_sp:1.1.3
Realnetworks » Realplayer Sp » Version: 1.1.4

cpe:2.3:a:realnetworks:realplayer_sp:1.1.4
Realnetworks » Realplayer Sp » Version: 1.1.5

cpe:2.3:a:realnetworks:realplayer_sp:1.1.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-4388

Products

Pricing

Contact Us