CVE-2010-4142

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests.

• CWE-119

• http://aluigi.org/adv/realwin_1-adv.txtExploit
• http://secunia.com/advisories/41849Vendor Advisory
• http://www.exploit-db.com/exploits/15259Exploit
• http://www.exploit-db.com/exploits/15337Exploit
• http://www.securityfocus.com/bid/44150Exploit
• http://aluigi.org/adv/realwin_1-adv.txtExploit
• http://secunia.com/advisories/41849Vendor Advisory
• http://www.exploit-db.com/exploits/15259Exploit
• http://www.exploit-db.com/exploits/15337Exploit
• http://www.securityfocus.com/bid/44150Exploit

Published

Nov 2, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4136Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4137Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4138Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4139Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4140Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4141Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4143SQL injection vulnerability in chart.php in phpCheckZ 1.1.0,…
• CVE-2010-4144SQL injection vulnerability in radyo.asp in Kisisel Radyo Sc…
• CVE-2010-4145Kisisel Radyo Script stores sensitive information under the …
• CVE-2010-4146Cross-site scripting (XSS) vulnerability in Attachmate Refle…
• CVE-2010-4147Multiple SQL injection vulnerabilities in Pentasoft Avactis …
• CVE-2010-4148Directory traversal vulnerability in AnyConnect 1.2.3.0, and…