Stack-Based Buffer Overflow in Real Networks Netzip Classic Application
CVE-2011-10016
9.3CRITICAL
Key Information:
- Vendor
Realnetworks Inc.
- Status
- Vendor
- CVE Published:
- 13 August 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2011-10016?
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when processing specially crafted ZIP archives. This vulnerability occurs when the application handles file names that exceed the prescribed buffer size, leading to potential arbitrary code execution under the victim user's context upon opening the ZIP file.
Affected Version(s)
Netzip Classic 7.5.1.86
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
C4SS!0 G0M3S