1046 matches found
CVE-2011-4246
The CVE-2011-4246 entry concerns the AAC codec in RealNetworks RealPlayer prior to 15.0.0 and Mac RealPlayer prior to 12.0.0.1703. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Connected sources confirm RealPlayer vu...
CVE-2011-4257
The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data...
CVE-2011-4249
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2011-4248
CVE-2011-4248 affects RealNetworks RealPlayer prior to 15.0.0, where parsing of AAC files can cause remote code execution. The root cause is a vulnerability in AAC/file parsing leading to buffer/data handling issues that could be exploited to run arbitrary code on the user’s system. Exploitation ...
CVE-2011-4258
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file...
CVE-2011-4246
The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2011-4250
Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2011-4255
CVE-2011-4255 affects RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703. A vulnerability in processing an invalid codec name could allow remote code execution. The advisory indicates exploitation requires user interaction (visiting a malicious page or opening a crafted f...
CVE-2011-4260
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file...
CVE-2011-4260
CVE-2011-4260 affects RealNetworks RealPlayer prior to version 15.0.0. The vulnerability exists in the MP4 header parsing (raac.dll) where a malformed MP4 header can trigger remote code execution. Public writeups (e.g., ZDI advisory) state an attacker can exploit by convincing a user to open a ma...
CVE-2011-4254
RealNetworks RealPlayer before 15.0.0 is affected by CVE-2011-4254: a vulnerability in RTSP SETUP request handling that can lead to remote code execution. The ZDI advisory attributes this to a use-after-free condition during RTSP SETUP parsing, requiring a crafted request and potentially user int...
CVE-2011-4261
CVE-2011-4261 affects RealNetworks RealPlayer prior to 15.0.0. The vulnerability in the MP4/esds width handling inside the dmp4 component can cause heap memory corruption, potentially enabling remote code execution. Public sources describe an in‑the‑wild risk requiring user interaction (per ZDI a...
CVE-2011-4244
CVE-2011-4244 affects RealNetworks RealPlayer before 15.0.0. The issue is a heap-based buffer overflow in the RealVideo renderer that allows remote attackers to execute arbitrary code via unspecified vectors. The provided documents consistently describe the vulnerable component (RealVideo rendere...
CVE-2011-4245
The CVE-2011-4245 entry concerns RealNetworks RealPlayer's RealVideo renderer. Affected products are RealPlayer for Windows before 15.0.0 and Mac RealPlayer before 12.0.0.1703. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via memory corruption, ...
CVE-2011-4251
CVE-2011-4251 affects RealNetworks RealPlayer for Windows prior to 15.0.0. The flaw is in how RealPlayer decodes RealMedia RealAudio sample data, where a length read from the file is trusted to size a buffer, enabling memory corruption and remote code execution. Public advisories (ZDI, Red Hat, O...
CVE-2011-4253
Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2011-4251
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file...
CVE-2011-4249
RealPlayer (Windows) before 15.0.0 is affected by CVE-2011-4249 due to an array index error in the RV30 codec during parsing of RV30 data, enabling remote code execution. ZDI notes the flaw allows code execution on vulnerable installations and requires user interaction (visiting a malicious page ...