CVE-2011-4255: Critical severity RealNetworks RealPlayer vulnerability
Published Nov 24, 2011
·Updated
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name.
Affected Software
38 affected components
RealNetworks RealPlayer=12.0.0.1569
RealNetworks RealPlayer=8.0
RealNetworks RealPlayer<=12.0.0.1701
RealNetworks RealPlayer=10.0.0.305
RealNetworks RealPlayer=10.0.0.331
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.1
RealNetworks RealPlayer=7.0
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer<=14.0.7
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=4
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=5
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=14.0.6
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=8
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=7
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.0
Event History
Nov 24, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4255?
CVE-2011-4255 is classified as a high-severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2011-4255?
To fix CVE-2011-4255, update RealPlayer to version 15.0.0 or later on Windows or version 12.0.0.1703 or later on Mac.
3
Which versions of RealPlayer are affected by CVE-2011-4255?
CVE-2011-4255 affects RealPlayer versions prior to 15.0.0 and Mac RealPlayer versions prior to 12.0.0.1703.
4
What type of attack is associated with CVE-2011-4255?
CVE-2011-4255 allows remote attackers to execute arbitrary code due to an invalid codec name error.
5
Is there a workaround for CVE-2011-4255 if I cannot update RealPlayer?
If you cannot update, avoid opening untrusted media files or links that may exploit CVE-2011-4255.