Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-4256
HistoryNov 24, 2011 - 11:55 a.m.

CVE-2011-4256

2011-11-2411:55:08
CWE-94
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.2%

JSON

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.

Affected configurations

NVD
Node
realnetworksrealplayerRange≤12.0.0.1701mac_os
OR
realnetworksrealplayerMatch7.0mac_os
OR
realnetworksrealplayerMatch8.0mac_os
OR
realnetworksrealplayerMatch10.0mac_os_x
OR
realnetworksrealplayerMatch10.0.0.305mac_os
OR
realnetworksrealplayerMatch10.0.0.331mac_os
OR
realnetworksrealplayerMatch10.1mac_os_x
OR
realnetworksrealplayerMatch12.0.0.1569mac_os
Node
realnetworksrealplayerRange≤14.0.7
OR
realnetworksrealplayerMatch4
OR
realnetworksrealplayerMatch5
OR
realnetworksrealplayerMatch6
OR
realnetworksrealplayerMatch7
OR
realnetworksrealplayerMatch8
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch11.0
OR
realnetworksrealplayerMatch11.0.1
OR
realnetworksrealplayerMatch11.0.2
OR
realnetworksrealplayerMatch11.0.2.1744
OR
realnetworksrealplayerMatch11.0.2.2315
OR
realnetworksrealplayerMatch11.0.3
OR
realnetworksrealplayerMatch11.0.4
OR
realnetworksrealplayerMatch11.0.5
OR
realnetworksrealplayerMatch11.1
OR
realnetworksrealplayerMatch11.1.3
OR
realnetworksrealplayerMatch11_build_6.0.14.748
OR
realnetworksrealplayerMatch12.0.0.1444
OR
realnetworksrealplayerMatch12.0.0.1548
OR
realnetworksrealplayerMatch14.0.0
OR
realnetworksrealplayerMatch14.0.1
OR
realnetworksrealplayerMatch14.0.1.609
OR
realnetworksrealplayerMatch14.0.1.633
OR
realnetworksrealplayerMatch14.0.2
OR
realnetworksrealplayerMatch14.0.3
OR
realnetworksrealplayerMatch14.0.4
OR
realnetworksrealplayerMatch14.0.5
OR
realnetworksrealplayerMatch14.0.6

Related

cve 1
zdi 1
securityvulns 2
cvelist 1
prion 1
openvas 4
nessus 1
cve
cve
CVE-2011-4256
2022-10-03 16:15:13
zdi
zdi
RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability
2011-11-28 00:00:00
securityvulns
securityvulns
ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability
2011-12-05 00:00:00
RealNetworks RealPlayer multiple security vulnerabilities
2011-12-11 00:00:00
cvelist
cvelist
CVE-2011-4256
2022-10-03 16:15:13
prion
prion
Code injection
2011-11-24 11:55:00
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities (Nov 2011) - Mac OS X
2011-11-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Mac OS X)
2011-11-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Nov 2011) - Windows
2011-11-29 00:00:00
nessus
nessus
RealPlayer for Windows < 15.0.0 Multiple Vulnerabilities
2011-12-06 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.2%

JSON
Related for NVD:CVE-2011-4256
cve1zdi1securityvulns2cvelist1prion1openvas4nessus1