CVE-2012-0922: Code Injection
Published Feb 8, 2012
·Updated
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
Affected Software
33 affected components
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.1.633
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=14.0.6
RealNetworks RealPlayer=14.0.7
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=15.0.0
RealNetworks RealPlayer=15.0.1.13
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.5
Event History
Feb 8, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0922?
CVE-2012-0922 has a critical severity level that allows for remote code execution.
2
How do I fix CVE-2012-0922?
To mitigate CVE-2012-0922, you should update your RealPlayer to the latest version available.
3
What versions of RealPlayer are affected by CVE-2012-0922?
CVE-2012-0922 affects RealPlayer versions 11.x, 14.x, and 15.x prior to 15.02.71.
4
What type of exploit is CVE-2012-0922 associated with?
CVE-2012-0922 is associated with a remote code execution exploit via crafted RMFF files.
5
Who is affected by the CVE-2012-0922 vulnerability?
Users of affected RealPlayer versions, especially those who handle RMFF files, are at risk from CVE-2012-0922.