CVE-2012-5690: Code Injection
Published Dec 19, 2012
·Updated
RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.
Affected Software
44 affected components
RealNetworks RealPlayer<=16.0.0
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=15.0.0
RealNetworks RealPlayer=15.0.4
RealNetworks RealPlayer=15.0.4.43
RealNetworks RealPlayer=15.0.5.109
RealNetworks RealPlayer=15.0.6.14
RealNetworks RealPlayer=15.02.71
RealNetworks RealPlayer SP=1.0.0
RealNetworks RealPlayer SP=1.0.1
RealNetworks RealPlayer SP=1.0.2
RealNetworks RealPlayer SP=1.0.5
RealNetworks RealPlayer SP=1.1
RealNetworks RealPlayer SP=1.1.1
RealNetworks RealPlayer SP=1.1.2
RealNetworks RealPlayer SP=1.1.3
RealNetworks RealPlayer SP=1.1.4
RealNetworks RealPlayer SP=1.1.5
Event History
Dec 19, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5690?
CVE-2012-5690 is classified as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2012-5690?
To fix CVE-2012-5690, update RealPlayer to version 16.0.0.282 or later.
3
Which versions of RealPlayer are affected by CVE-2012-5690?
CVE-2012-5690 affects RealPlayer versions before 16.0.0.282 and RealPlayer SP versions 1.0 to 1.1.5.
4
What type of attack does CVE-2012-5690 facilitate?
CVE-2012-5690 facilitates remote code execution attacks via crafted RealAudio files.
5
Is CVE-2012-5690 still a threat if I have updated RealPlayer?
No, if you have updated RealPlayer to version 16.0.0.282 or later, CVE-2012-5690 should no longer pose a threat.