CVE-2010-3747

CVE-2010-3747 describes an ActiveX control vulnerability in RealNetworks RealPlayer versions 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by failing to properly initialize an object component when parsing a long CDDA URI. With a CVSS score of 9.3, this vulnerability is critical, requiring no authentication and having high impacts on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists for exploitation, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.