CVE-2011-4255: Undefined Security Weakness

Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name...

PT-2011-4900

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a crafted QCELP stream. This is related to the parsing of QCELP streams. Recommendations For versions prior to 15.0.0, update to...

PT-2011-4909

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer Mac versions prior to 12.0.0.1703 Description The issue concerns the RV30 codec in RealPlayer, which does not initialize an unspecified index value. This allows remote attackers to execute arbitra...

CVE-2011-4249: Improper Input Validation

Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4254: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request...

CVE-2011-4256: Improper Control of Generation of Code

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...

PT-2011-4907

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request, specifically targeting the RTSP SETUP endpoint. This enables attackers to potentially gain control ov...

CVE-2011-4251: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file...

CVE-2011-4261: Improper Restriction of Operations within the Bounds of a Memory Buffer

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...

PT-2011-4906

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer Mac versions prior to 12.0.0.1703 Description The issue allows remote attackers to execute arbitrary code via unknown vectors due to an unspecified vulnerability in the RV20 codec. Recommendations...

PT-2011-4913

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a malformed header in an MP4 file. It is related to the raac.dll and stsz components, as well as the mp4arender and esds channel...

PT-2011-4914

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via crafted video dimensions in an MP4 file...

CVE-2011-4260: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file...

CVE-2011-4257: Improper Control of Generation of Code

The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data...

PT-2011-4905

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer versions prior to 12.0.0.1703 Description The issue allows remote attackers to execute arbitrary code via a crafted sample height in the RV10 codec. Recommendations For versions prior to 15.0.0,...

PT-2011-4911

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file. This is related to the MLTI chunk length parsing. Recommendations For versions...

CVE-2011-4258: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file...

PT-2011-4899

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Mac RealPlayer versions prior to 12.0.0.1703 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors in the AAC...

PT-2011-4910

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via crafted channel data in the Cook codec. Recommendations For versions prior to 15.0.0, update to version 15.0.0 or later to resolve...

PT-2011-4898

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Mac RealPlayer versions prior to 12.0.0.1703 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors in the...