Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

RealNetworks RealPlayerUnspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-2946

RealNetworks RealPlayerBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.

First published (updated )
CVE-2011-2953

RealNetworks RealPlayerBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

First published (updated )
CVE-2011-4246

RealNetworks RealPlayerCode Injection

Risk 87
Severity
10
Code Injection
AV:N/AC:L/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.

First published (updated )
CVE-2011-4254

RealNetworks RealPlayerInput Validation

Risk 87
Severity
10
Input Validation
AV:N/AC:L/Au:N/C:C/I:C/A:C

Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.

First published (updated )
CVE-2011-4249

RealNetworks RealPlayerUnspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPla…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-4253

RealNetworks RealPlayerCode Injection

Risk 87
Severity
10
Code Injection
AV:N/AC:L/Au:N/C:C/I:C/A:C

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-4256

RealNetworks RealPlayerUnspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPla…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.

First published (updated )
CVE-2011-4250

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.

First published (updated )
CVE-2012-0923

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream.

First published (updated )
CVE-2012-0925

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJSTARTCODE code in a header within a video stream.

First published (updated )
CVE-2012-0924

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.

First published (updated )
CVE-2012-0922

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the codedframesize value in a RealAudio audio stream.

First published (updated )
CVE-2012-0927

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream.

First published (updated )
CVE-2012-0926

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.

First published (updated )
CVE-2012-2411

RealNetworks RealPlayerRealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly par…

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.

First published (updated )
CVE-2012-2406

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.

First published (updated )
CVE-2012-5690

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.

First published (updated )
CVE-2012-5691

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file.

First published (updated )
CVE-2013-4973

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file.

First published (updated )
CVE-2013-4974

RealNetworks RealPlayerUnspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execut…

Risk 79
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file.

First published (updated )
CVE-2011-4262

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.

First published (updated )
CVE-2011-4258

RealNetworks RealPlayerCode Injection

Risk 79
Severity
9.3
Code Injection
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.

First published (updated )
CVE-2011-4260

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.

First published (updated )
CVE-2011-4261

RealNetworks RealPlayerUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via vectors related to a modal dialog.

First published (updated )
CVE-2011-2955

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.

First published (updated )
CVE-2011-2949

RealNetworks RealPlayerUse After Free

Risk 79
Severity
9.3
Use After Free
AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors.

First published (updated )
CVE-2011-2954

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.

First published (updated )
CVE-2011-2948

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream.

First published (updated )
CVE-2011-2945

RealNetworks RealPlayerBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted rawdataframe field in an AAC file.

First published (updated )
CVE-2011-2951

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203