CVE-2011-4260

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file...

CVE-2011-4251

CVE-2011-4251 affects RealNetworks RealPlayer for Windows prior to 15.0.0. The flaw is in how RealPlayer decodes RealMedia RealAudio sample data, where a length read from the file is trusted to size a buffer, enabling memory corruption and remote code execution. Public advisories (ZDI, Red Hat, O...

CVE-2011-4256

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4251

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file...

CVE-2011-4244

Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4249

RealPlayer (Windows) before 15.0.0 is affected by CVE-2011-4249 due to an array index error in the RV30 codec during parsing of RV30 data, enabling remote code execution. ZDI notes the flaw allows code execution on vulnerable installations and requires user interaction (visiting a malicious page ...

CVE-2011-4247

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream...

CVE-2011-4261

CVE-2011-4261 affects RealNetworks RealPlayer prior to 15.0.0. The vulnerability in the MP4/esds width handling inside the dmp4 component can cause heap memory corruption, potentially enabling remote code execution. Public sources describe an in‑the‑wild risk requiring user interaction (per ZDI a...

CVE-2011-4252

The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height...

CVE-2011-4259

RealNetworks RealPlayer

CVE-2011-4254

RealNetworks RealPlayer before 15.0.0 is affected by CVE-2011-4254: a vulnerability in RTSP SETUP request handling that can lead to remote code execution. The ZDI advisory attributes this to a use-after-free condition during RTSP SETUP parsing, requiring a crafted request and potentially user int...

CVE-2011-4245

The CVE-2011-4245 entry concerns RealNetworks RealPlayer's RealVideo renderer. Affected products are RealPlayer for Windows before 15.0.0 and Mac RealPlayer before 12.0.0.1703. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via memory corruption, ...

CVE-2011-4260

CVE-2011-4260 affects RealNetworks RealPlayer prior to version 15.0.0. The vulnerability exists in the MP4 header parsing (raac.dll) where a malformed MP4 header can trigger remote code execution. Public writeups (e.g., ZDI advisory) state an attacker can exploit by convincing a user to open a ma...

CVE-2011-4253

Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...

RealNetworks RealPlayer QCP Parsing Buffer Overflow (CVE-2011-2950)

A code execution vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to insufficient bounds checking while parsing .qcp files. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted .qcp file with an affected version of...

RealPlayer本地HTML文件跨域脚本执行远程代码执行漏洞

CVE ID: CVE-2011-1221 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealNetworks RealPlayer 11.0至11.1、14.0.0至14.0.5、RealPlayer SP 1.0至1.1.5、RealPlayer Enterprise 2.0至2.1.5版本中的ActiveX控件中存在跨域脚本执行漏洞，可使远程攻击者通过本地HTML文档在本地域中注入任意Web脚本或HTML。 Real Networks RealPlayer SP 1.0 - 1.1.5 Real Networks RealPlayer Enterpris...

CVE-2011-1221

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...

Cross site scripting

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...

CVE-2011-1221

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...

CVE-2011-1221

CVE-2011-1221 is a cross-zone scripting vulnerability in the RealPlayer ActiveX control affecting RealPlayer 11.0–11.1, 14.0.0–14.0.5; RealPlayer SP 1.0–1.1.5; and RealPlayer Enterprise 2.0–2.1.5. The issue allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a loc...