CVE-2012-2411: Buffer Overflow
Published May 18, 2012
·Updated
Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.
Affected Software
41 affected components
RealNetworks RealPlayer<=15.0.4
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=15.0.0
RealNetworks RealPlayer=15.0.1.13
RealNetworks RealPlayer=15.02.71
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.5
Event History
May 18, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2411?
CVE-2012-2411 is rated as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2012-2411?
To mitigate CVE-2012-2411, update RealPlayer to version 15.0.4.53 or later.
3
What types of attacks can exploit CVE-2012-2411?
CVE-2012-2411 can be exploited through crafted RealJukebox Media files that trigger buffer overflows.
4
Which versions of RealPlayer are affected by CVE-2012-2411?
CVE-2012-2411 affects RealPlayer versions before 15.0.4.53, as well as RealPlayer SP versions 1.0 through 1.1.5.
5
What are the potential impacts of CVE-2012-2411?
Exploitation of CVE-2012-2411 can lead to arbitrary code execution, which may compromise the affected system.