CVE-2011-4256: Code Injection
Published Nov 24, 2011
·Updated
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
Affected Software
38 affected components
RealNetworks RealPlayer=12.0.0.1569
RealNetworks RealPlayer=8.0
RealNetworks RealPlayer<=12.0.0.1701
RealNetworks RealPlayer=10.0.0.305
RealNetworks RealPlayer=10.0.0.331
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.1
RealNetworks RealPlayer=7.0
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer<=14.0.7
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=4
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=5
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=14.0.6
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=8
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=7
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.0
Event History
Nov 24, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4256?
CVE-2011-4256 is considered critical due to its potential to allow remote code execution.
2
How do I fix CVE-2011-4256?
To fix CVE-2011-4256, upgrade RealPlayer to version 15.0.0 or later.
3
Which versions of RealPlayer are affected by CVE-2011-4256?
CVE-2011-4256 affects RealPlayer versions prior to 15.0.0 and includes various versions for Mac OS.
4
Can CVE-2011-4256 be exploited remotely?
Yes, CVE-2011-4256 can be exploited remotely, allowing attackers to execute arbitrary code.
5
What types of attacks can utilize CVE-2011-4256?
CVE-2011-4256 can be exploited through various unknown vectors, leading to arbitrary code execution.