CVE-2011-4250

CVE-2011-4250 affects RealNetworks RealPlayer (Windows <15.0.0; Mac

CVE-2011-4253

CVE-2011-4253 affects RealNetworks RealPlayer (RV20 decoding) on Windows and Mac. The vulnerability stems from how RV20 sample data is allocated and partially filled, leading to using uninitialized data as an index, enabling remote code execution under RealPlayer’s process. Exploitation requires ...

CVE-2011-4260

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file...

CVE-2011-4253

Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4252

The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height...

CVE-2011-4252

CVE-2011-4252 affects RealNetworks RealPlayer (Windows and Mac) where the RV10 codec parses a height value from a RealVideo object. The flaw allows memory corruption and remote code execution if a user opens a crafted sample or visits a malicious page. Public details indicate exploitation require...

CVE-2011-4250

Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4247

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream...

CVE-2011-4254

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request...

CVE-2011-4248

CVE-2011-4248 affects RealNetworks RealPlayer prior to 15.0.0, where parsing of AAC files can cause remote code execution. The root cause is a vulnerability in AAC/file parsing leading to buffer/data handling issues that could be exploited to run arbitrary code on the user’s system. Exploitation ...

CVE-2011-4249

Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4256

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4251

CVE-2011-4251 affects RealNetworks RealPlayer for Windows prior to 15.0.0. The flaw is in how RealPlayer decodes RealMedia RealAudio sample data, where a length read from the file is trusted to size a buffer, enabling memory corruption and remote code execution. Public advisories (ZDI, Red Hat, O...

CVE-2011-4257

The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data...

PT-2011-4897

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description A heap-based buffer overflow issue exists in the RealVideo renderer, allowing remote attackers to execute arbitrary code via unspecified vectors. Recommendations For versions prior to 15.0.0,...

CVE-2011-4259: Undefined Security Weakness

Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file...

PT-2011-4904

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file. This is related to a problem in the sample size parsing functionality. Recommendations F...

PT-2011-4915

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a crafted MP4 file. This is related to the mp4fformat rdrf component. Recommendations For versions prior to 15.0.0, update to versi...

PT-2011-4912

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue is related to an integer underflow in RealPlayer, which allows remote attackers to execute arbitrary code via a crafted width value in an MPG file. Recommendations For versions prior to...

CVE-2011-4251: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file...