Lucene search
HistoryNov 24, 2011 - 11:55 a.m.
CVE-2011-4261
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
High
EPSS
0.027
Percentile
90.6%
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.
Affected configurations
Node
realnetworksrealplayerRange≤14.0.7
ORrealnetworksrealplayerMatch4
ORrealnetworksrealplayerMatch5
ORrealnetworksrealplayerMatch6
ORrealnetworksrealplayerMatch7
ORrealnetworksrealplayerMatch8
ORrealnetworksrealplayerMatch10.0
ORrealnetworksrealplayerMatch10.5
ORrealnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.2.1744
ORrealnetworksrealplayerMatch11.0.2.2315
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
ORrealnetworksrealplayerMatch11.1.3
ORrealnetworksrealplayerMatch11_build_6.0.14.748
ORrealnetworksrealplayerMatch12.0.0.1444
ORrealnetworksrealplayerMatch12.0.0.1548
ORrealnetworksrealplayerMatch14.0.0
ORrealnetworksrealplayerMatch14.0.1
ORrealnetworksrealplayerMatch14.0.1.609
ORrealnetworksrealplayerMatch14.0.1.633
ORrealnetworksrealplayerMatch14.0.2
ORrealnetworksrealplayerMatch14.0.3
ORrealnetworksrealplayerMatch14.0.4
ORrealnetworksrealplayerMatch14.0.5
ORrealnetworksrealplayerMatch14.0.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| realnetworks | realplayer | * | cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:* |
| realnetworks | realplayer | 4 | cpe:2.3:a:realnetworks:realplayer:4:*:*:*:*:*:*:* |
| realnetworks | realplayer | 5 | cpe:2.3:a:realnetworks:realplayer:5:*:*:*:*:*:*:* |
| realnetworks | realplayer | 6 | cpe:2.3:a:realnetworks:realplayer:6:*:*:*:*:*:*:* |
| realnetworks | realplayer | 7 | cpe:2.3:a:realnetworks:realplayer:7:*:*:*:*:*:*:* |
| realnetworks | realplayer | 8 | cpe:2.3:a:realnetworks:realplayer:8:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.0 | cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.5 | cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:* |
| realnetworks | realplayer | 11.0 | cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 11.0.1 | cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:* |
Related
zdi
zdi
RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability
2012-06-06 00:00:00
prion
prion
Memory corruption
2011-11-24 11:55:00
cve
cve
CVE-2011-4261
2011-11-24 11:55:08
securityvulns
securityvulns
ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability
2012-06-13 00:00:00
RealNetworks RealPlayer multiple security vulnerabilities
2012-06-13 00:00:00
cvelist
cvelist
CVE-2011-4261
2011-11-24 11:00:00
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)
2011-11-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Nov 2011) - Windows
2011-11-29 00:00:00
nessus
nessus
RealPlayer for Windows < 15.0.0 Multiple Vulnerabilities
2011-12-06 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
High
EPSS
0.027
Percentile
90.6%
Related for NVD:CVE-2011-4261