CVE-2011-4249: Input Validation
Published Nov 24, 2011
·Updated
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
30 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer<=14.0.7
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=4
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=5
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=14.0.6
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=8
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=7
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.0
Event History
Nov 24, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4249?
CVE-2011-4249 is classified as a critical vulnerability that allows remote code execution.
2
How do I fix CVE-2011-4249?
To fix CVE-2011-4249, upgrade RealPlayer to version 15.0.0 or later.
3
What versions of RealPlayer are affected by CVE-2011-4249?
CVE-2011-4249 affects RealPlayer versions 4.0 to 14.0.7 and all major versions in between.
4
Can CVE-2011-4249 be exploited remotely?
Yes, CVE-2011-4249 can be exploited remotely through unspecified vectors.
5
What are the potential impacts of CVE-2011-4249?
Exploitation of CVE-2011-4249 can lead to arbitrary code execution on the affected system.