# CVEs published 2010-12-14 29 CVEs were published on December 14, 2010: 1 critical, 1 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2010-0121](https://cve.now/CVE-2010-0121.md): The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and L (no CVSS) - [CVE-2010-0125](https://cve.now/CVE-2010-0125.md): RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12. (no CVSS) - [CVE-2010-2579](https://cve.now/CVE-2010-2579.md): The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11 (no CVSS) - [CVE-2010-2997](https://cve.now/CVE-2010-2997.md): Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1 (no CVSS) - [CVE-2010-2999](https://cve.now/CVE-2010-2999.md): Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux (no CVSS) - [CVE-2010-4344](https://cve.now/CVE-2010-4344.md): Heap-based buffer overflow in the string\_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code (CVSS 9.8, KEV) - [CVE-2010-4345](https://cve.now/CVE-2010-4345.md): Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confi (CVSS 7.8, KEV) - [CVE-2010-4375](https://cve.now/CVE-2010-4375.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and (no CVSS) - [CVE-2010-4376](https://cve.now/CVE-2010-4376.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, (no CVSS) - [CVE-2010-4377](https://cve.now/CVE-2010-4377.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0 (no CVSS) - [CVE-2010-4378](https://cve.now/CVE-2010-4378.md): The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enter (no CVSS) - [CVE-2010-4379](https://cve.now/CVE-2010-4379.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac R (no CVSS) - [CVE-2010-4380](https://cve.now/CVE-2010-4380.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 al (no CVSS) - [CVE-2010-4381](https://cve.now/CVE-2010-4381.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and M (no CVSS) - [CVE-2010-4382](https://cve.now/CVE-2010-4382.md): Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2. (no CVSS) - [CVE-2010-4383](https://cve.now/CVE-2010-4383.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac R (no CVSS) - [CVE-2010-4384](https://cve.now/CVE-2010-4384.md): Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPla (no CVSS) - [CVE-2010-4385](https://cve.now/CVE-2010-4385.md): Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlaye (no CVSS) - [CVE-2010-4386](https://cve.now/CVE-2010-4386.md): RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and (no CVSS) - [CVE-2010-4387](https://cve.now/CVE-2010-4387.md): The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, (no CVSS) - [CVE-2010-4388](https://cve.now/CVE-2010-4388.md): The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 throu (no CVSS) - [CVE-2010-4389](https://cve.now/CVE-2010-4389.md): Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPl (no CVSS) - [CVE-2010-4390](https://cve.now/CVE-2010-4390.md): Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11. (no CVSS) - [CVE-2010-4391](https://cve.now/CVE-2010-4391.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 an (no CVSS) - [CVE-2010-4392](https://cve.now/CVE-2010-4392.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2. (no CVSS) - [CVE-2010-4394](https://cve.now/CVE-2010-4394.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to exe (no CVSS) - [CVE-2010-4395](https://cve.now/CVE-2010-4395.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 a (no CVSS) - [CVE-2010-4396](https://cve.now/CVE-2010-4396.md): Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, Rea (no CVSS) - [CVE-2010-4397](https://cve.now/CVE-2010-4397.md): Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-12-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.