Lucene search

[email protected]NVD:CVE-2011-1525

HistoryApr 06, 2011 - 4:55 p.m.

CVE-2011-1525

2011-04-0616:55:15

CWE-119

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.39 Low

EPSS

Percentile

97.3%

JSON

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.

Affected configurations

NVD

Node

realnetworksrealplayerRange≤14.0.1.633

realnetworksrealplayerMatch4

realnetworksrealplayerMatch5

realnetworksrealplayerMatch6

realnetworksrealplayerMatch7

realnetworksrealplayerMatch8

realnetworksrealplayerMatch10.0

realnetworksrealplayerMatch10.5

realnetworksrealplayerMatch11.0

realnetworksrealplayerMatch11.0.1

realnetworksrealplayerMatch11.0.2

realnetworksrealplayerMatch11.0.2.1744

realnetworksrealplayerMatch11.0.2.2315

realnetworksrealplayerMatch11.0.3

realnetworksrealplayerMatch11.0.4

realnetworksrealplayerMatch11.0.5

realnetworksrealplayerMatch11.1

realnetworksrealplayerMatch11.1.3

realnetworksrealplayerMatch11_build_6.0.14.748

realnetworksrealplayerMatch12.0.0.1444

realnetworksrealplayerMatch12.0.0.1548

realnetworksrealplayerMatch14.0.0

realnetworksrealplayerMatch14.0.1

realnetworksrealplayerMatch14.0.1.609

References

aluigi.org/adv/real_5-adv.txt

osvdb.org/71260

secunia.com/advisories/43847

securityreason.com/securityalert/8181

service.real.com/realplayer/security/04122011_player/en/

www.exploit-db.com/exploits/17019

www.securityfocus.com/archive/1/517083/100/0/threaded

www.securityfocus.com/bid/46946

www.securitytracker.com/id?1025245

exchange.xforce.ibmcloud.com/vulnerabilities/66209

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.39 Low

EPSS

Percentile

97.3%

JSON

Related for NVD:CVE-2011-1525

cvelist1 openvas2 cve1 prion1 nessus2