PT-2011-4902

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue is related to an array index error in the RV30 codec, allowing remote attackers to execute arbitrary code. Recommendations For versions prior to 15.0.0, update to version 15.0.0 or late...

CVE-2011-4244: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4250: Undefined Security Weakness

Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4252: Improper Control of Generation of Code

The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height...

CVE-2011-4245: Improper Restriction of Operations within the Bounds of a Memory Buffer

The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

PT-2011-4903

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer versions prior to 12.0.0.1703 Description The issue is related to an unspecified vulnerability in the ATRC codec of RealPlayer, allowing remote attackers to execute arbitrary code. Recommendations...

PT-2011-4908

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer versions prior to 12.0.0.1703 Description The issue allows remote attackers to execute arbitrary code via an invalid codec name. This can lead to remote code execution. Recommendations For version...

CVE-2011-4253: Undefined Security Weakness

Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4247: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream...

CVE-2011-4248: Improper Control of Generation of Code

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file...

CVE-2011-4246: Improper Restriction of Operations within the Bounds of a Memory Buffer

The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

PT-2011-4901

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code via a malformed AAC file. This is related to the parsing of AAC files. Recommendations For versions prior to 15.0.0, update to version...

RealNetworks RealPlayer QCP Parsing Buffer Overflow (CVE-2011-2950)

A code execution vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to insufficient bounds checking while parsing .qcp files. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted .qcp file with an affected version of...

RealPlayer本地HTML文件跨域脚本执行远程代码执行漏洞

CVE ID: CVE-2011-1221 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealNetworks RealPlayer 11.0至11.1、14.0.0至14.0.5、RealPlayer SP 1.0至1.1.5、RealPlayer Enterprise 2.0至2.1.5版本中的ActiveX控件中存在跨域脚本执行漏洞，可使远程攻击者通过本地HTML文档在本地域中注入任意Web脚本或HTML。 Real Networks RealPlayer SP 1.0 - 1.1.5 Real Networks RealPlayer Enterpris...

CVE-2011-1221

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...

Cross site scripting

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...

CVE-2011-1221

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...

CVE-2011-1221

CVE-2011-1221 is a cross-zone scripting vulnerability in the RealPlayer ActiveX control affecting RealPlayer 11.0–11.1, 14.0.0–14.0.5; RealPlayer SP 1.0–1.1.5; and RealPlayer Enterprise 2.0–2.1.5. The issue allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a loc...

PT-2011-2959

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer versions 14.0.0 through 14.0.5 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.0 through 2.1.5 Description A cross-zone scripting issue allows remote attackers to injec...

CVE-2011-1221: Improper Neutralization of Input During Web Page Generation

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zon...