CVE-2011-4252: Code Injection
Published Nov 24, 2011
·Updated
The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.
Affected Software
38 affected components
RealNetworks RealPlayer<=12.0.0.1701
RealNetworks RealPlayer=7.0
RealNetworks RealPlayer=8.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0.0.305
RealNetworks RealPlayer=10.0.0.331
RealNetworks RealPlayer=10.1
RealNetworks RealPlayer=12.0.0.1569
RealNetworks RealPlayer<=14.0.7
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.6
Event History
Nov 24, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4252?
CVE-2011-4252 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2011-4252?
To fix CVE-2011-4252, update RealPlayer to version 15.0.0 or later for Windows and 12.0.0.1703 or later for Mac OS.
3
What are the affected versions of RealPlayer for CVE-2011-4252?
CVE-2011-4252 affects RealPlayer versions prior to 15.0.0 on Windows and prior to 12.0.0.1703 on Mac OS.
4
Who can exploit CVE-2011-4252?
Remote attackers can exploit CVE-2011-4252 by sending crafted media files that trigger the vulnerability.
5
What types of attacks are possible with CVE-2011-4252?
Exploitation of CVE-2011-4252 can lead to arbitrary code execution, allowing attackers to take control of the affected system.