Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

RealNetworks RealPlayerUnspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPla…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-4253

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.

First published (updated )
CVE-2011-4261

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.

First published (updated )
CVE-2011-4260

RealNetworks RealPlayerInput Validation

Risk 87
Severity
10
Input Validation
AV:N/AC:L/Au:N/C:C/I:C/A:C

Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.

First published (updated )
CVE-2011-4249

RealNetworks RealPlayerXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document, a different vulnerability than CVE-2011-2947.

First published (updated )
CVE-2011-1221

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.

First published (updated )
CVE-2011-4251

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file.

First published (updated )
CVE-2011-4248

RealNetworks RealPlayerUnspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPla…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-4250

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.

First published (updated )
CVE-2012-5691

RealNetworks RealPlayerCode Injection

Risk 87
Severity
10
Code Injection
AV:N/AC:L/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.

First published (updated )
CVE-2011-4254

RealNetworks RealPlayerBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

First published (updated )
CVE-2011-4246

RealNetworks RealPlayerCode Injection

Risk 87
Severity
10
Code Injection
AV:N/AC:L/Au:N/C:C/I:C/A:C

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-4256

RealNetworks RealPlayerUnspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execut…

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file.

First published (updated )
CVE-2011-4262

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.

First published (updated )
CVE-2012-5690

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.

First published (updated )
CVE-2011-4258

RealNetworks RealPlayerUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via vectors related to a modal dialog.

First published (updated )
CVE-2011-2955

RealNetworks RealPlayerUnspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-2946

RealNetworks RealPlayerUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors.

First published (updated )
CVE-2011-2954

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream.

First published (updated )
CVE-2011-2945

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted rawdataframe field in an AAC file.

First published (updated )
CVE-2011-2951

RealNetworks RealPlayerXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document.

First published (updated )
CVE-2011-2947

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.

First published (updated )
CVE-2011-2949

RealNetworks RealPlayerBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.

First published (updated )
CVE-2011-2953

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.

First published (updated )
CVE-2011-2948

RealNetworks RealPlayerUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via vectors related to a dialog box.

First published (updated )
CVE-2011-2952

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.

First published (updated )
CVE-2011-2950

RealNetworks RealPlayerRealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before…

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.

First published (updated )
CVE-2012-3234

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.

First published (updated )
CVE-2012-2411

RealNetworks RealPlayerRealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly par…

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.

First published (updated )
CVE-2012-2406

RealNetworks RealPlayerBuffer Overflow

Risk 52
Severity
7.5
Buffer Overflow
AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410.

First published (updated )
CVE-2012-2409

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203