29 matches found
Code injection
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2011-4249
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2011-4256
CVE-2011-4256 affects RealNetworks RealPlayer (RV30 codec). The vulnerability occurs when parsing RV30 samples: the code allocates a buffer then fails to fully initialize it and improperly trusts an index from the partially filled buffer, enabling memory corruption that can lead to remote code ex...
CVE-2011-4249
RealPlayer (Windows) before 15.0.0 is affected by CVE-2011-4249 due to an array index error in the RV30 codec during parsing of RV30 data, enabling remote code execution. ZDI notes the flaw allows code execution on vulnerable installations and requires user interaction (visiting a malicious page ...
CVE-2011-4256
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2011-4256: Improper Control of Generation of Code
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2011-4249: Improper Input Validation
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...
PT-2011-4902
Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue is related to an array index error in the RV30 codec, allowing remote attackers to execute arbitrary code. Recommendations For versions prior to 15.0.0, update to version 15.0.0 or late...
PT-2011-4909
Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer Mac versions prior to 12.0.0.1703 Description The issue concerns the RV30 codec in RealPlayer, which does not initialize an unspecified index value. This allows remote attackers to execute arbitra...