CVE-2010-3000

CVE-2010-3000 describes multiple integer overflow vulnerabilities in RealNetworks RealPlayer 11.0-11.1 and RealPlayer SP 1.0-1.1.4 on Windows. These flaws, specifically in the ParseKnownType function, allow remote attackers to execute arbitrary code through specially crafted FLV files containing malicious HX_FLV_META_AMF_TYPE_MIXEDARRAY or HX_FLV_META_AMF_TYPE_ARRAY data. With a CVSS score of 9.3, this vulnerability is critical, requiring medium attack complexity but allowing for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of widespread community discussion or media coverage.