CVE-2011-2954: Use After Free
Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2954?
CVE-2011-2954 is classified as a critical vulnerability that allows remote code execution.
How do I fix CVE-2011-2954?
To mitigate CVE-2011-2954, users should upgrade to a patched version of RealPlayer that addresses this vulnerability.
Which versions of RealPlayer are affected by CVE-2011-2954?
CVE-2011-2954 affects RealPlayer versions 11.0 through 11.1 and 14.0.0 through 14.0.5, as well as RealPlayer SP 1.0 through 1.1.5.
Can CVE-2011-2954 be exploited through the internet?
Yes, CVE-2011-2954 can be exploited by remote attackers via unspecified vectors, potentially allowing them to execute arbitrary code.
What are the implications of CVE-2011-2954?
The implications of CVE-2011-2954 include the potential for attackers to gain control over the affected system through the use-after-free vulnerability.