QwikSec

Security Database

CVE

CWE

Training

CVE-2011-10016

Published: Aug 13, 2025

Modified: Apr 7, 2026

PUBLISHED

Description

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation allows arbitrary code execution under the context of the victim user when the ZIP file is opened.

Vendor	Product	Versions
RealNetworks Inc.	Netzip Classic	affected `7.5.1.86`

Weaknesses (CWE)

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/real_networks_netzip_bof.rb

exploit

https://www.exploit-db.com/exploits/16083

exploit

https://www.exploit-db.com/exploits/17985

exploit

https://www.softpedia.com/get/Compression-tools/NetZip-Classic.shtml

product

https://www.vulncheck.com/advisories/real-networks-netzip-classic-file-parsing-buffer-overflow

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.