Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream...

Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified...

Heap overflow

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted...

Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an...

Design/Logic Flaw

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header...

Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file...

CVE-2010-4381

CVE-2010-4381 describes a heap-based buffer overflow in RealNetworks RealPlayer products (RealPlayer 11.x, RealPlayer SP, RealPlayer Enterprise, and Mac RealPlayer up to 12.0.0.1444) that is triggered by a crafted AAC file. The vulnerability permits remote attackers to achieve unspecified impact....

CVE-2010-0121

CVE-2010-0121 affects RealNetworks RealPlayer family (RealPlayer 11.x, RealPlayer SP 1.x, Mac RealPlayer 11.x–12.0.0.1444, Linux RealPlayer 11.0.2.1744). The vulnerability is in the RealAudio cook codec uninitialised memory during parsing, per NVD and Secunia Secunia Research advisory; impact is ...

CVE-2010-0125

CVE-2010-0125 affects RealNetworks RealPlayer products: RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0–12.0.0.1444. The vulnerability lies in parsing spectral data in AAC audio content, with unspecified impact and remote attack potential as sta...

CVE-2010-4388

The 1 Upsell.htm, 2 Main.html, and 3 Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended...

CVE-2010-4396

CVE-2010-4396 involves a Cross-zone scripting vulnerability in RealNetworks RealPlayer's ActiveX control (NavigateToURL path) affecting RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and RealPlayer Enterprise 2.1.2. The HandleAction method can be exploited to inject arbitrary web script/HTML into...

CVE-2010-0121

The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors...

CVE-2010-4388

The CVE-2010-4388 issue affects RealNetworks RealPlayer suites (RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, RealPlayer Enterprise 2.1.2–2.1.3). Concrete details in connected sources show a uniform vulnerability in the RealOneActiveXObject handling within Upsell.htm, Main.html, and Custsupport....

CVE-2010-2579

The CVE-2010-2579 issue affects RealNetworks RealPlayer family (RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, Enterprise 2.1.2, Mac 11.x, Linux 11.0.2.1744). The root cause is a failure to properly initialize the Cook codec’s channel count, leading to use of uninitialized memory and memory acces...

CVE-2010-2997

CVE-2010-2997 is tied to multiple advisories (RHSA-2010:0981, CESA-2010:0981) and OpenVAS/Nessus entries describing multiple security flaws in RealPlayer/HelixPlayer, potentially enabling arbitrary code execution via crafted media/stream content. Remediation across affected platforms centers on r...

CVE-2010-4389

CVE-2010-4389 affects RealNetworks RealPlayer and RealPlayer SP (Windows and Linux) where a heap-based buffer overflow in the Cook codec initialization allows remote code execution. Affected versions include RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and Linux RealPlayer 11.0.2.1744. Public d...

CVE-2010-4375

CVE-2010-4375 is a heap-based buffer overflow in RealNetworks RealPlayer 11.0–11.1 and Mac/Linux RealPlayer 11.0–11.1, exploitable via malformed multi-rate audio data to achieve remote code execution. The connected advisories tie this to HelixPlayer, indicating overlapping code bases with RealPla...

CVE-2010-4396

Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying ...

CVE-2010-4397

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file...

CVE-2010-4397

CVE-2010-4397 affects RealNetworks RealPlayer 11.0–11.1 (and variants on Windows, Mac, and Linux) where an integer overflow in pnen3260.dll occurs while parsing the TIT2 atom in AAC files. This leads to remote code execution if a crafted AAC file is opened. The vulnerability is documented across ...