CVE-2011-2948: Buffer Overflow
RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2948?
CVE-2011-2948 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2011-2948?
To fix CVE-2011-2948, users should update RealPlayer to the latest version provided by RealNetworks.
Which software versions are affected by CVE-2011-2948?
CVE-2011-2948 affects RealPlayer versions 11.0 through 11.1, 14.0.0 through 14.0.5, RealPlayer SP versions 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569.
What types of attacks can CVE-2011-2948 enable?
CVE-2011-2948 can enable attackers to execute arbitrary code or cause a denial of service.
Is there a workaround for CVE-2011-2948?
There are no publicized workarounds for CVE-2011-2948, making the best option to update the software.