CVE-2011-2950: Buffer Overflow
Published Aug 18, 2011
·Updated
Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.
Affected Software
18 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.1.5
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.0.5
Event History
Aug 18, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2950?
CVE-2011-2950 has a high severity rating due to its potential for allowing remote code execution.
2
How do I fix CVE-2011-2950?
To fix CVE-2011-2950, users should update RealPlayer to the latest version provided by RealNetworks.
3
What are the affected versions in CVE-2011-2950?
CVE-2011-2950 affects RealPlayer versions 11.0 through 11.1, 14.0.0 through 14.0.5, and RealPlayer SP versions 1.0 through 1.1.5.
4
What kind of attack does CVE-2011-2950 enable?
CVE-2011-2950 enables remote attackers to execute arbitrary code on the victim's system.
5
Is there a workaround for CVE-2011-2950?
There is no official workaround for CVE-2011-2950; updating to the latest version is the recommended action.