CVE-2012-0922: Code Injection
First published: Wed Feb 08 2012(Updated: )
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RealPlayer | =14.0.0 | |
| RealPlayer | =14.0.1 | |
| RealPlayer | =14.0.1.609 | |
| RealPlayer | =14.0.1.633 | |
| RealPlayer | =14.0.2 | |
| RealPlayer | =14.0.3 | |
| RealPlayer | =14.0.4 | |
| RealPlayer | =14.0.5 | |
| RealPlayer | =14.0.6 | |
| RealPlayer | =14.0.7 | |
| RealPlayer | =11.0 | |
| RealPlayer | =11.0.1 | |
| RealPlayer | =11.0.2 | |
| RealPlayer | =11.0.2.1744 | |
| RealPlayer | =11.0.2.2315 | |
| RealPlayer | =11.0.3 | |
| RealPlayer | =11.0.4 | |
| RealPlayer | =11.0.5 | |
| RealPlayer | =11.1 | |
| RealPlayer | =11.1.3 | |
| RealPlayer | =11_build_6.0.14.748 | |
| RealPlayer | =15.0.0 | |
| RealPlayer | =15.0.1.13 | |
| RealNetworks RealPlayer SP | =1.0.0 | |
| RealNetworks RealPlayer SP | =1.0.1 | |
| RealNetworks RealPlayer SP | =1.0.2 | |
| RealNetworks RealPlayer SP | =1.0.5 | |
| RealNetworks RealPlayer SP | =1.1 | |
| RealNetworks RealPlayer SP | =1.1.1 | |
| RealNetworks RealPlayer SP | =1.1.2 | |
| RealNetworks RealPlayer SP | =1.1.3 | |
| RealNetworks RealPlayer SP | =1.1.4 | |
| RealNetworks RealPlayer SP | =1.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-0922?
CVE-2012-0922 has a critical severity level that allows for remote code execution.
How do I fix CVE-2012-0922?
To mitigate CVE-2012-0922, you should update your RealPlayer to the latest version available.
What versions of RealPlayer are affected by CVE-2012-0922?
CVE-2012-0922 affects RealPlayer versions 11.x, 14.x, and 15.x prior to 15.02.71.
What type of exploit is CVE-2012-0922 associated with?
CVE-2012-0922 is associated with a remote code execution exploit via crafted RMFF files.
Who is affected by the CVE-2012-0922 vulnerability?
Users of affected RealPlayer versions, especially those who handle RMFF files, are at risk from CVE-2012-0922.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/realnetworks
- canonical/realplayer
- version/realplayer/14.0.0
- version/realplayer/14.0.1
- version/realplayer/14.0.1.609
- version/realplayer/14.0.1.633
- version/realplayer/14.0.2
- version/realplayer/14.0.3
- version/realplayer/14.0.4
- version/realplayer/14.0.5
- version/realplayer/14.0.6
- version/realplayer/14.0.7
- version/realplayer/11.0
- version/realplayer/11.0.1
- version/realplayer/11.0.2
- version/realplayer/11.0.2.1744
- version/realplayer/11.0.2.2315
- version/realplayer/11.0.3
- version/realplayer/11.0.4
- version/realplayer/11.0.5
- version/realplayer/11.1
- version/realplayer/11.1.3
- version/realplayer/11_build_6.0.14.748
- version/realplayer/15.0.0
- version/realplayer/15.0.1.13
- canonical/realnetworks realplayer sp
- version/realnetworks realplayer sp/1.0.0
- version/realnetworks realplayer sp/1.0.1
- version/realnetworks realplayer sp/1.0.2
- version/realnetworks realplayer sp/1.0.5
- version/realnetworks realplayer sp/1.1
- version/realnetworks realplayer sp/1.1.1
- version/realnetworks realplayer sp/1.1.2
- version/realnetworks realplayer sp/1.1.3
- version/realnetworks realplayer sp/1.1.4
- version/realnetworks realplayer sp/1.1.5