Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-4252
HistoryNov 24, 2011 - 11:55 a.m.

CVE-2011-4252

2011-11-2411:55:07
CWE-94
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%

JSON

The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.

Affected configurations

NVD
Node
realnetworksrealplayerRange≤12.0.0.1701mac_os
OR
realnetworksrealplayerMatch7.0mac_os
OR
realnetworksrealplayerMatch8.0mac_os
OR
realnetworksrealplayerMatch10.0mac_os_x
OR
realnetworksrealplayerMatch10.0.0.305mac_os
OR
realnetworksrealplayerMatch10.0.0.331mac_os
OR
realnetworksrealplayerMatch10.1mac_os_x
OR
realnetworksrealplayerMatch12.0.0.1569mac_os
Node
realnetworksrealplayerRange≤14.0.7
OR
realnetworksrealplayerMatch4
OR
realnetworksrealplayerMatch5
OR
realnetworksrealplayerMatch6
OR
realnetworksrealplayerMatch7
OR
realnetworksrealplayerMatch8
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch11.0
OR
realnetworksrealplayerMatch11.0.1
OR
realnetworksrealplayerMatch11.0.2
OR
realnetworksrealplayerMatch11.0.2.1744
OR
realnetworksrealplayerMatch11.0.2.2315
OR
realnetworksrealplayerMatch11.0.3
OR
realnetworksrealplayerMatch11.0.4
OR
realnetworksrealplayerMatch11.0.5
OR
realnetworksrealplayerMatch11.1
OR
realnetworksrealplayerMatch11.1.3
OR
realnetworksrealplayerMatch11_build_6.0.14.748
OR
realnetworksrealplayerMatch12.0.0.1444
OR
realnetworksrealplayerMatch12.0.0.1548
OR
realnetworksrealplayerMatch14.0.0
OR
realnetworksrealplayerMatch14.0.1
OR
realnetworksrealplayerMatch14.0.1.609
OR
realnetworksrealplayerMatch14.0.1.633
OR
realnetworksrealplayerMatch14.0.2
OR
realnetworksrealplayerMatch14.0.3
OR
realnetworksrealplayerMatch14.0.4
OR
realnetworksrealplayerMatch14.0.5
OR
realnetworksrealplayerMatch14.0.6

Related

cve 1
zdi 1
prion 1
securityvulns 2
cvelist 1
openvas 4
nessus 1
cve
cve
CVE-2011-4252
2022-10-03 16:15:13
zdi
zdi
RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability
2011-11-28 00:00:00
prion
prion
Design/Logic Flaw
2011-11-24 11:55:00
securityvulns
securityvulns
ZDI-11-335 : RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability
2011-12-05 00:00:00
RealNetworks RealPlayer multiple security vulnerabilities
2011-12-11 00:00:00
cvelist
cvelist
CVE-2011-4252
2022-10-03 16:15:13
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Mac OS X)
2011-11-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Nov 2011) - Mac OS X
2011-11-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)
2011-11-29 00:00:00
nessus
nessus
RealPlayer for Windows < 15.0.0 Multiple Vulnerabilities
2011-12-06 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%

JSON
Related for NVD:CVE-2011-4252
cve1zdi1prion1securityvulns2cvelist1openvas4nessus1