CVE-2011-4259: Critical severity RealNetworks RealPlayer vulnerability
Published Nov 24, 2011
·Updated
Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file.
Affected Software
30 affected components
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer<=14.0.7
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=4
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=5
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=14.0.6
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=8
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=7
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.0
Event History
Nov 24, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4259?
CVE-2011-4259 has a severity rating of high due to the potential for remote code execution.
2
How do I fix CVE-2011-4259?
To fix CVE-2011-4259, update RealPlayer to version 15.0 or later.
3
What types of devices are affected by CVE-2011-4259?
CVE-2011-4259 affects various versions of RealPlayer on Windows and potentially other platforms.
4
Can CVE-2011-4259 be exploited remotely?
Yes, CVE-2011-4259 can be exploited remotely through crafted MPG files.
5
What happens if I am vulnerable to CVE-2011-4259?
If vulnerable to CVE-2011-4259, an attacker could execute arbitrary code on your system.