CVE-2011-2953

2011-08-1823:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-2953

activex control

realnetworks realplayer

remote code execution

nvd

security vulnerability

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.7%

JSON

An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.1
realnetworks:realplayerrealnetworks realplayereq14.0.3
realnetworks:realplayerrealnetworks realplayereq14.0.1
realnetworks:realplayerrealnetworks realplayereq14.0.4
realnetworks:realplayerrealnetworks realplayereq14.0.2
realnetworks:realplayerrealnetworks realplayereq14.0.5
realnetworks:realplayerrealnetworks realplayereq14.0.0
realnetworks:realplayer_sprealnetworks realplayer speq1.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.1.5

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.1
realnetworks:realplayer	realnetworks realplayer	eq	14.0.3
realnetworks:realplayer	realnetworks realplayer	eq	14.0.1
realnetworks:realplayer	realnetworks realplayer	eq	14.0.4
realnetworks:realplayer	realnetworks realplayer	eq	14.0.2
realnetworks:realplayer	realnetworks realplayer	eq	14.0.5
realnetworks:realplayer	realnetworks realplayer	eq	14.0.0
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.1.5