CVE-2010-0125

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-12-14 · updated 2026-06-16
Weakness: CWE-264

Description

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.

Affected products

RealNetworks Realplayer: 11.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4, 11.0.5 (+3)
RealNetworks Realplayer Sp: 1.0.0, 1.0.1, 1.0.2, 1.0.5, 1.1, 1.1.1 (+3)

References

http://service.real.com/realplayer/security/12102010_player/en/
http://www.securitytracker.com/id?1024861
http://service.real.com/realplayer/security/12102010_player/en/
http://www.securitytracker.com/id?1024861

Get alerted when CVE-2010-0125 or the next vulnerability affects your stack