First published: Thu Nov 24 2011(Updated: )
The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
RealPlayer | <=12.0.0.1701 | |
RealPlayer | =7.0 | |
RealPlayer | =8.0 | |
RealPlayer | =10.0 | |
RealPlayer | =10.0.0.305 | |
RealPlayer | =10.0.0.331 | |
RealPlayer | =10.1 | |
RealPlayer | =12.0.0.1569 | |
RealPlayer | <=14.0.7 | |
RealPlayer | =4 | |
RealPlayer | =5 | |
RealPlayer | =6 | |
RealPlayer | =7 | |
RealPlayer | =8 | |
RealPlayer | =10.0 | |
RealPlayer | =10.5 | |
RealPlayer | =11.0 | |
RealPlayer | =11.0.1 | |
RealPlayer | =11.0.2 | |
RealPlayer | =11.0.2.1744 | |
RealPlayer | =11.0.2.2315 | |
RealPlayer | =11.0.3 | |
RealPlayer | =11.0.4 | |
RealPlayer | =11.0.5 | |
RealPlayer | =11.1 | |
RealPlayer | =11.1.3 | |
RealPlayer | =11_build_6.0.14.748 | |
RealPlayer | =12.0.0.1444 | |
RealPlayer | =12.0.0.1548 | |
RealPlayer | =14.0.0 | |
RealPlayer | =14.0.1 | |
RealPlayer | =14.0.1.609 | |
RealPlayer | =14.0.1.633 | |
RealPlayer | =14.0.2 | |
RealPlayer | =14.0.3 | |
RealPlayer | =14.0.4 | |
RealPlayer | =14.0.5 | |
RealPlayer | =14.0.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-4245 has a high severity rating due to the potential for remote code execution and denial of service.
To fix CVE-2011-4245, users should upgrade to a version of RealPlayer that is 15.0.0 or later on Windows and 12.0.0.1703 or later on Mac.
Affected versions include RealPlayer prior to 15.0.0 and older Mac versions before 12.0.0.1703.
The impacts of CVE-2011-4245 may include arbitrary code execution and memory corruption leading to application crashes.
Yes, CVE-2011-4245 can be exploited remotely by attackers through unspecified vectors.