CVE:CVE-2009-4244
CNNVD:CNNVD-201001-244
RealNetworks RealPlayer 10版本; RealPlayer 10.5 6.0.12.1040至6.0.12.1741版本; RealPlayer 11 11.0.0至11.0.4版本; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, 和 11.0版本; Linux RealPlayer 10版本; 以及 Helix Player 10.x版本中存在堆缓冲区溢出漏洞。 远程攻击者可以借助一个小的长度值的SIPR codec文件触发错误内存分配，以执行任意代码。
solution:Upgrade realnetworks realplayer to a higher version than 10.0,10.5,11.0,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,10.1,11.0.0,and avoid the version 10.0,10.5,11.0,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,10.1,11.0.0; Upgrade realnetworks realplayer_enterprise to a higher version than *; Upgrade realnetworks realplayer_sp to a higher version than 1.0.0,1.0.1,and avoid the version 1.0.0,1.0.1; Upgrade realnetworks helix_player to a higher version than 10.0,11.0.0,11.0.1,and avoid the version 10.0,11.0.0,11.0.1