Lucene search

[email protected]CVE-2011-1525

HistoryApr 06, 2011 - 4:55 p.m.

CVE-2011-1525

2011-04-0616:55:15

CWE-119

[email protected]

web.nvd.nist.gov

realplayer

buffer overflow

code execution

ivr file

cve-2011-1525

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.39 Low

EPSS

Percentile

97.3%

JSON

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.

Affected configurations

NVD

Node

realnetworksrealplayerRange≤14.0.1.633

realnetworksrealplayerMatch4

realnetworksrealplayerMatch5

realnetworksrealplayerMatch6

realnetworksrealplayerMatch7

realnetworksrealplayerMatch8

realnetworksrealplayerMatch10.0

realnetworksrealplayerMatch10.5

realnetworksrealplayerMatch11.0

realnetworksrealplayerMatch11.0.1

realnetworksrealplayerMatch11.0.2

realnetworksrealplayerMatch11.0.2.1744

realnetworksrealplayerMatch11.0.2.2315

realnetworksrealplayerMatch11.0.3

realnetworksrealplayerMatch11.0.4

realnetworksrealplayerMatch11.0.5

realnetworksrealplayerMatch11.1

realnetworksrealplayerMatch11.1.3

realnetworksrealplayerMatch11_build_6.0.14.748

realnetworksrealplayerMatch12.0.0.1444

realnetworksrealplayerMatch12.0.0.1548

realnetworksrealplayerMatch14.0.0

realnetworksrealplayerMatch14.0.1

realnetworksrealplayerMatch14.0.1.609

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayerle14.0.1.633
realnetworks:realplayerrealnetworks realplayereq4
realnetworks:realplayerrealnetworks realplayereq5
realnetworks:realplayerrealnetworks realplayereq6
realnetworks:realplayerrealnetworks realplayereq7
realnetworks:realplayerrealnetworks realplayereq8
realnetworks:realplayerrealnetworks realplayereq10.0
realnetworks:realplayerrealnetworks realplayereq10.5
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.0.1

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	le	14.0.1.633
realnetworks:realplayer	realnetworks realplayer	eq	4
realnetworks:realplayer	realnetworks realplayer	eq	5
realnetworks:realplayer	realnetworks realplayer	eq	6
realnetworks:realplayer	realnetworks realplayer	eq	7
realnetworks:realplayer	realnetworks realplayer	eq	8
realnetworks:realplayer	realnetworks realplayer	eq	10.0
realnetworks:realplayer	realnetworks realplayer	eq	10.5
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.1

Rows per page:

1-10 of 241

References

aluigi.org/adv/real_5-adv.txt

osvdb.org/71260

secunia.com/advisories/43847

securityreason.com/securityalert/8181

service.real.com/realplayer/security/04122011_player/en/

www.exploit-db.com/exploits/17019

www.securityfocus.com/archive/1/517083/100/0/threaded

www.securityfocus.com/bid/46946

www.securitytracker.com/id?1025245

exchange.xforce.ibmcloud.com/vulnerabilities/66209

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.39 Low

EPSS

Percentile

97.3%

JSON

Related for CVE-2011-1525

cvelist1 openvas2 prion1 nvd1 nessus2