CVE-2010-4391

CVE-2010-4391 describes a heap-based buffer overflow vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3. This critical vulnerability allows remote attackers to execute arbitrary code by crafting an RMX file with a malicious value in an unspecified header field. With a CVSS score of 9.3, it carries a high severity due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and potential for remote code execution, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.