CVE-2011-4257: Code Injection
Published Nov 24, 2011
·Updated
The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data.
Affected Software
30 affected components
RealNetworks RealPlayer<=14.0.7
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.6
Event History
Nov 24, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4257?
CVE-2011-4257 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2011-4257?
To fix CVE-2011-4257, users should update their RealPlayer software to version 15.0.0 or later.
3
What software is affected by CVE-2011-4257?
CVE-2011-4257 affects RealPlayer versions prior to 15.0.0, including multiple earlier versions.
4
Can CVE-2011-4257 affect my computer remotely?
Yes, CVE-2011-4257 allows attackers to execute arbitrary code on systems running vulnerable versions of RealPlayer remotely.
5
What is the exploit type for CVE-2011-4257?
CVE-2011-4257 is classified as a code execution vulnerability that exploits the Cook codec in RealPlayer.