CVE-2011-10016CWE-121

Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Critical · published August 13, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation allows arbitrary code execution under the context of the victim user when the ZIP file is opened.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00505 · 42.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-13T20:52Z
EPSS history
Timeline
  • 13 AUG 20:52Z
    Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow
    cvelistv5