CVE-2011-1525: Buffer Overflow
Published Apr 6, 2011
·Updated
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
Affected Software
24 affected components
RealNetworks RealPlayer<=14.0.1.633
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
Event History
Apr 6, 2011
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1525?
CVE-2011-1525 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2011-1525?
To fix CVE-2011-1525, you should upgrade your RealPlayer software to the latest version available.
3
What versions of RealPlayer are affected by CVE-2011-1525?
CVE-2011-1525 affects RealPlayer versions 11.0 to 14.0.1 as well as earlier versions down to 4.x.
4
What does CVE-2011-1525 exploit?
CVE-2011-1525 exploits a heap-based buffer overflow vulnerability in rvrender.dll.
5
What type of attack is possible with CVE-2011-1525?
CVE-2011-1525 allows attackers to execute arbitrary code by leveraging a crafted IVR file.