CVE-2012-2406: Critical severity realplayer vulnerability
Published May 18, 2012
·Updated
RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.
Affected Software
41 affected components
RealNetworks RealPlayer<=15.0.4
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=15.0.0
RealNetworks RealPlayer=15.0.1.13
RealNetworks RealPlayer=15.02.71
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.5
Event History
May 18, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2406?
The severity of CVE-2012-2406 is rated as critical, as it allows for remote code execution.
2
How do I fix CVE-2012-2406?
To fix CVE-2012-2406, update RealPlayer to version 15.0.4.53 or later, or the latest version of RealNetworks RealPlayer SP.
3
What versions are affected by CVE-2012-2406?
CVE-2012-2406 affects RealPlayer versions prior to 15.0.4.53 and RealPlayer SP versions 1.0 through 1.1.5.
4
Can CVE-2012-2406 be exploited remotely?
Yes, CVE-2012-2406 can be exploited remotely through a crafted RealMedia file.
5
What are the impacts of CVE-2012-2406?
The impacts of CVE-2012-2406 include potential remote code execution, leading to unauthorized actions on affected systems.