CVE-2011-2945: Buffer Overflow
Published Aug 18, 2011
·Updated
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream.
Affected Software
18 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.1.5
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.0.5
Event History
Aug 18, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What are the affected versions for CVE-2011-2945?
CVE-2011-2945 affects RealPlayer versions 11.0 to 11.1, 14.0.0 to 14.0.5, and RealPlayer SP versions 1.0 to 1.1.5.
2
What is the severity of CVE-2011-2945?
CVE-2011-2945 has been classified with a critical severity due to the potential for remote code execution.
3
How do I fix CVE-2011-2945?
To fix CVE-2011-2945, users should update to the latest version of RealPlayer that addresses this vulnerability.
4
Can CVE-2011-2945 be exploited remotely?
Yes, CVE-2011-2945 can be exploited remotely by attackers through a crafted SIPR stream.
5
What type of vulnerability is CVE-2011-2945?
CVE-2011-2945 is a heap-based buffer overflow vulnerability.