CVE-2012-2408

CVE-2012-2408: RealPlayer’s AAC SDK in RealPlayer (and RealPlayer SP) before the listed fixed versions contains a vulnerability in decoding crafted AAC files that can cause heap memory corruption and a denial of service. Affected products include RealPlayer before 15.0.6.14 (Windows), RealPlayer ...

CVE-2012-2410

CVE-2012-2410 refers to a buffer overflow in RealNetworks RealPlayer prior to 15.0.6.14, RealPlayer SP 1.0–1.1.5, and Mac RealPlayer prior to 12.0.1.1750. The vulnerability can be triggered by a crafted RealMedia file to cause a denial of service and possibly other impact. The description explici...

CVE-2012-2408

The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted AAC file that is not properly handled...

CVE-2012-2407

Technical summary (CVE-2012-2407) RealPlayer and RealPlayer SP prior to version 15.0.6.14 (Windows/macOS RealPlayer before 12.0.1.1750; RealPlayer SP 1.0–1.1.5) are affected by a buffer overflow in AAC stream-data unpacking , allowing a remote attacker to cause a denial of service and potentially...

CVE-2012-2409

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than...

CVE-2012-3234

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash or possibly have...

CVE-2012-2407

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data...

CVE-2012-2409

CVE-2012-2409 is a buffer overflow in RealNetworks RealPlayer affecting RealPlayer before 15.0.6.14, RealPlayer SP 1.0–1.1.5, and Mac RealPlayer before 12.0.1.1750. The vulnerability can be triggered by a crafted RealMedia file and may cause a denial of service or other unspecified impact; it is ...

CVE-2012-3234

Affected software: RealNetworks RealPlayer products prior to 15.0.6.14 (Windows/macOS RealPlayer SP up to 1.1.5; Mac RealPlayer before 12.0.1.1750) are vulnerable. Root cause: improper handling of codec frame sizes in RealAudio files, enabling a remote attacker to trigger a divide-by-zero error t...

CVE-2012-2410

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than...

RealPlayer for Windows < 15.0.6.14 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.6.14. As such, it is affected by multiple vulnerabilities : - A buffer overflow error exists related to 'AAC' handling, specifically unpacking of the stream data. CVE-2012-2407 - A...

Real Networks RealPlayer < 15.0.6.14 Multiple Vulnerabilities

Binary data 6574.prm...

RealPlayer RealMedia文件处理缓冲区溢出漏洞(CVE-2012-2410)

Bugtraq ID:55473 CVE ID:CVE-2012-2410 Real Networks RealPlayer是流行的媒体播放器。 Real Networks RealPlayer处理RealMedia文件存在一个错误，允许攻击者利用漏洞触发缓冲区溢出，可以应用程序上下文执行任意代码。 0 RealNetworks RealPlayer for Mac 12.0 RealNetworks RealPlayer 14.0.2 RealNetworks RealPlayer 11.0 厂商解决方案 RealPlayer 15.0.6.14和Mac RealPlayer...

CVE-2010-5228

Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

CVE-2010-5228

CVE-2010-5228 affects RealPlayer SP 1.1.5/12.0.0.879; the vulnerability arises from an untrusted search path that allows local users to gain privileges through a malicious rio500.dll placed in the current working directory, demonstrated with a directory containing an .avi file. The connected Red ...

CVE-2010-5228

Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party...

Scientific Linux Security Update : HelixPlayer on SL4.x i386/x86_64

Multiple security flaws were discovered in RealPlayer. Helix Player and RealPlayer share a common source code base; therefore, some of the flaws discovered in RealPlayer may also affect Helix Player. Some of these flaws could, when opening, viewing, or playing a malicious media file or stream, le...

CentOS Update for HelixPlayer-uninstall CESA-2010:0981 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealPlayer Plus 14.0.4.53 RealAudio Integer Division

Exploit for windows platform in category local exploits Title : RealPlayer Plus 14.0.4.53 RealAudio Integer Division By Zero CVE : 2012-3235 References : http://service.real.com/realplayer/security/06292012player/en/ Auther : Senator of Pirates E-Mail : email protected FaceBook :...