# CVEs published 2010-12-14 29 CVEs were published on December 14, 2010: 1 critical, 1 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2010-0121](https://cve.now/CVE-2010-0121.md): The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and… (no CVSS) - [CVE-2010-0125](https://cve.now/CVE-2010-0125.md): RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through… (no CVSS) - [CVE-2010-2579](https://cve.now/CVE-2010-2579.md): The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer… (no CVSS) - [CVE-2010-2997](https://cve.now/CVE-2010-2997.md): Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through… (no CVSS) - [CVE-2010-2999](https://cve.now/CVE-2010-2999.md): Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and… (no CVSS) - [CVE-2010-4344](https://cve.now/CVE-2010-4344.md): Heap-based buffer overflow in the string\_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code (CVSS 9.8, KEV) - [CVE-2010-4345](https://cve.now/CVE-2010-4345.md): Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confi (CVSS 7.8, KEV) - [CVE-2010-4375](https://cve.now/CVE-2010-4375.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744… (no CVSS) - [CVE-2010-4376](https://cve.now/CVE-2010-4376.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through… (no CVSS) - [CVE-2010-4377](https://cve.now/CVE-2010-4377.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through… (no CVSS) - [CVE-2010-4378](https://cve.now/CVE-2010-4378.md): The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer… (no CVSS) - [CVE-2010-4379](https://cve.now/CVE-2010-4379.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac… (no CVSS) - [CVE-2010-4380](https://cve.now/CVE-2010-4380.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2… (no CVSS) - [CVE-2010-4381](https://cve.now/CVE-2010-4381.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and… (no CVSS) - [CVE-2010-4382](https://cve.now/CVE-2010-4382.md): Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise… (no CVSS) - [CVE-2010-4383](https://cve.now/CVE-2010-4383.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac… (no CVSS) - [CVE-2010-4384](https://cve.now/CVE-2010-4384.md): Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux… (no CVSS) - [CVE-2010-4385](https://cve.now/CVE-2010-4385.md): Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux… (no CVSS) - [CVE-2010-4386](https://cve.now/CVE-2010-4386.md): RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6… (no CVSS) - [CVE-2010-4387](https://cve.now/CVE-2010-4387.md): The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through… (no CVSS) - [CVE-2010-4388](https://cve.now/CVE-2010-4388.md): The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0… (no CVSS) - [CVE-2010-4389](https://cve.now/CVE-2010-4389.md): Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux… (no CVSS) - [CVE-2010-4390](https://cve.now/CVE-2010-4390.md): Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer… (no CVSS) - [CVE-2010-4391](https://cve.now/CVE-2010-4391.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2… (no CVSS) - [CVE-2010-4392](https://cve.now/CVE-2010-4392.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and… (no CVSS) - [CVE-2010-4394](https://cve.now/CVE-2010-4394.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to… (no CVSS) - [CVE-2010-4395](https://cve.now/CVE-2010-4395.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744… (no CVSS) - [CVE-2010-4396](https://cve.now/CVE-2010-4396.md): Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1… (no CVSS) - [CVE-2010-4397](https://cve.now/CVE-2010-4397.md): Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2010-12-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.