Lucene search

MitreCVE-2010-3002

HistoryAug 30, 2010 - 8:00 p.m.

CVE-2010-3002

2010-08-3020:00:02

mitre

web.nvd.nist.gov

cve-2010-3002

realnetworks realplayer

vulnerability

access restrictions

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.007

Percentile

80.3%

JSON

Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors.

Affected configurations

Nvd

Node

realnetworksrealplayerMatch11.0

realnetworksrealplayerMatch11.1

AND

microsoftwindows

VendorProductVersionCPE
realnetworksrealplayer11.0cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*
realnetworksrealplayer11.1cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	realplayer	11.0	cpe:2.3:a:realnetworks:realplayer:11.0:::::::*
realnetworks	realplayer	11.1	cpe:2.3:a:realnetworks:realplayer:11.1:::::::*
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::

References

secunia.com/advisories/41154

service.real.com/realplayer/security/08262010_player/en/

www.securitytracker.com/id?1024370

www.vupen.com/english/advisories/2010/2216

exchange.xforce.ibmcloud.com/vulnerabilities/61426

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7227

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.007

Percentile

80.3%

JSON

Related for CVE-2010-3002