CVE-2007-4599

Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist PLS file...

CVE-2007-5080

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow...

CVE-2007-4904

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 FC6 and possibly other platforms, allow user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-5601

Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import...

CVE-2008-3064

Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a "Local resource reference vulnerability."...

CVE-2008-3066

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

RealTimes (Realplayer) 18.0.1.6 Privilege Escalation Vulnerability

RealTimes Realplayer versions 18.0.1.6 and below suffer from a desktop service trusted path privilege escalation vulnerability. RealTimes Realplayer Desktop Service Trusted Path Privilege Escalation Affected Version: 18.0.1.6 or below Vendor Homepage: http://www.real.com/?ref=cloud Vulnerability...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - Ver2 (CVE-2011-4259)

A memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. An attacker could exploit this vulnerability by enticing a target user to open a...

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)

An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...

RealPlayer < 17.0.10.8 (Win) Remote Buffer Overflow

Binary data 8331.prm...

RealNetworks RealPlayer Multiple Buffer Overflow Vulnerabilities (Jul 2014) - Windows

RealPlayer is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RealPlayer for Windows <= 17.0.8.22 MP4 Multiple Memory Corruptions

According to its build number, the installed version of RealPlayer on the remote Windows host is prior to or equal to 17.0.8.22. It is, therefore, affected by multiple memory corruption vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary code within the context of t...

CVE-2014-3113

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed 1 elst or 2 stsz atom in an MP4 file...

Buffer overflow

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed 1 elst or 2 stsz atom in an MP4 file...

CVE-2014-3113

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed 1 elst or 2 stsz atom in an MP4 file...

CVE-2014-3113

RealPlayer (Windows/macOS) prior to version 17.0.10.8 is affected by multiple buffer overflows in MP4 handling, specifically in the elst and stsz atoms, allowing remote code execution. The CVE is CVE-2014-3113. Affected products include RealPlayer pre-17.0.10.8 (and related builds). Root cause: m...

CVE-2014-3113: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed 1 elst or 2 stsz atom in an MP4 file...

PT-2014-1705

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 17.0.10.8 Description The issue allows remote attackers to execute arbitrary code via a malformed 1 elst or 2 stsz atom in an MP4 file. This is due to multiple buffer overflows in the software. Recommendations For...

KLA10450 ACE vulnerability in RealPlayer

Multiple buffer overflows was found in the RealPlayer. By using this vulnerability malicious user can execute arbitrary code. This vulnerability can be exploited remotely via specially designed MP4 file. Original advisories RealNetworks advisory Exploitation Related products RealPlayer...

KLA10306 ACE vulnerability in RealPlayer

A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories RealPlayer bulletin Exploitation Related products RealPlayer CVE list...