CVE-2009-4242

Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.

• CWE-119

• http://lists.helixcommunity.org/pipermail/datatype-cvs/2008-September/008633.html
• http://osvdb.org/61966
• http://secunia.com/advisories/38218Vendor Advisory
• http://secunia.com/advisories/38450
• http://securitytracker.com/id?1023489Patch
• http://service.real.com/realplayer/security/01192010_player/en/Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0094.html
• http://www.securityfocus.com/archive/1/509096/100/0/threaded
• http://www.securityfocus.com/bid/37880
• http://www.vupen.com/english/advisories/2010/0178Patch, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-006/Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=561436
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55795
• https://helixcommunity.org/viewcvs/datatype/image/gif/common/gifcodec.cpp?view=log#rev1.8
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10144
• http://lists.helixcommunity.org/pipermail/datatype-cvs/2008-September/008633.html
• http://osvdb.org/61966
• http://secunia.com/advisories/38218Vendor Advisory
• http://secunia.com/advisories/38450
• http://securitytracker.com/id?1023489Patch
• http://service.real.com/realplayer/security/01192010_player/en/Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0094.html
• http://www.securityfocus.com/archive/1/509096/100/0/threaded
• http://www.securityfocus.com/bid/37880
• http://www.vupen.com/english/advisories/2010/0178Patch, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-006/Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=561436
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55795
• https://helixcommunity.org/viewcvs/datatype/image/gif/common/gifcodec.cpp?view=log#rev1.8
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10144

Published

Jan 25, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4236The process function in data/class/pages/admin/customer/LC_P…
• CVE-2009-4237Multiple cross-site scripting (XSS) vulnerabilities in TestL…
• CVE-2009-4238Multiple SQL injection vulnerabilities in TestLink before 1.…
• CVE-2009-4239Cross-site scripting (XSS) vulnerability in the Web console …
• CVE-2009-4240Multiple buffer overflows in unspecified setuid executables …
• CVE-2009-4241Heap-based buffer overflow in RealNetworks RealPlayer 10, Re…
• CVE-2009-4243RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 thro…
• CVE-2009-4244Heap-based buffer overflow in RealNetworks RealPlayer 10; Re…
• CVE-2009-4245Heap-based buffer overflow in RealNetworks RealPlayer 10, Re…
• CVE-2009-4246Stack-based buffer overflow in RealNetworks RealPlayer 10, R…
• CVE-2009-4247Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in…
• CVE-2009-4248Buffer overflow in the RTSPProtocol::HandleSetParameterReque…