CVE-2012-0926

The CVE-2012-0926 vulnerability affects RealNetworks RealPlayer: the RV10 RealVideo stream handling in RealPlayer 11.x, 14.x, 15.x (and RealPlayer SP 1.0–1.1.5) fails to validate height/width fields, allowing remote code execution via a crafted RV10 video. Root cause is miscalculation of an offse...

CVE-2012-0924

RealNetworks RealPlayer 11.x, 14.x and 15.x (before 15.0.2.71) and RealPlayer SP 1.0–1.1.5 are affected by a VIDOBJ_START_CODE handling flaw in MPEG streams that allows remote code execution. The vulnerability arises in the dmp4.dll decoding path when processing a VIDOBJ_START_CODE object, leadin...

CVE-2012-0922

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file...

CVE-2012-0925

RealPlayer RV40 remote code execution vulnerability (CVE-2012-0925) affects RealPlayer 11.x, 14.x, 15.x before 15.02.71 and RealPlayer SP 1.0–1.1.5. The flaw is in rv40.dll when parsing RV40 sample data, where a miscalculated offset can lead to arbitrary code execution. Exploitation requires a us...

CVE-2012-0926: Improper Control of Generation of Code

The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream...

PT-2012-2956

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue arises from the RV10 codec's improper handling of height and width values in RealVideo video streams, allowing remote attacker...

Real Networks RealPlayer Atrac样本解码远程代码执行漏洞

Bugtraq ID: 51890 CVE ID：CVE-2012-0928 RealNetworks RealPlayer是一款流行的媒体播放程序 RealNetworks RealPlayer Atrac样本解码存在安全问题，远程攻击者可以构建恶意媒体文件，诱使用户解析，以应用程序上下文执行任意代码 0 RealPlayer 15.x 厂商解决方案 RealPlayer 15.0.2.71已经修复此漏洞，建议用户下载使用： http://www.real.com...

PT-2012-2958

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x RealPlayer versions 14.x through 14.0.7 RealPlayer SP versions 1.0 through 1.1.5 Mac RealPlayer versions 12.x prior to 12.0.0.1703 Description The issue arises from the improper decoding of samples by the ATRAC codec,...

CVE-2012-0928: Improper Control of Generation of Code

The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file...

Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities

Binary data 6311.prm...

Real Networks RealPlayer 'VIDOBJ_START_CODE'远程代码执行漏洞

Bugtraq ID: 51885 CVE ID：CVE-2012-0924 RealNetworks RealPlayer是一款流行的媒体播放程序 RealNetworks RealPlayer处理VIDOBJSTARTCODE段存在未明错误，远程攻击者可以构建恶意媒体文件，诱使用户解析，以应用程序上下文执行任意代码 0 RealPlayer 15.x 厂商解决方案 RealPlayer 15.0.2.71已经修复此漏洞，建议用户下载使用： http://www.real.com...

CVE-2012-0922: Improper Control of Generation of Code

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file...

CVE-2012-0925: Improper Control of Generation of Code

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...

PT-2012-2952

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote attackers to execute arbitrary code via crafted flags in an RMFF file. This is related to the rvrender.dll...

CVE-2012-0927: Improper Control of Generation of Code

Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the codedframesize value in a RealAudio audio stream...

PT-2012-2957

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote attackers to execute arbitrary code via vectors involving the coded frame size value in a RealAudio audio stream...

RealPlayer for Windows < 15.0.2.71 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.2.71. As such, it is affected by multiple vulnerabilities : - Errors exist related to 'rvrender RMFF' flags, 'RV20' frame size arrays, 'VIDOBJSTARTCODE', 'RV40', 'RV10',...

PT-2012-2953

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue arises from the RV20 codec's improper handling of the frame size array in RealPlayer, allowing remote attackers to execute...

PT-2012-2955

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream. Recommendations For RealPlayer...

CVE-2012-0924: Improper Control of Generation of Code

RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJSTARTCODE code in a header within a video stream...