5237 matches found
Memory corruption
The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Code injection
Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors...
Code injection
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...
Code injection
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name...
Design/Logic Flaw
The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height...
CVE-2011-4255
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name...
CVE-2011-4257
The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data...
CVE-2011-4249
RealPlayer (Windows) before 15.0.0 is affected by CVE-2011-4249 due to an array index error in the RV30 codec during parsing of RV30 data, enabling remote code execution. ZDI notes the flaw allows code execution on vulnerable installations and requires user interaction (visiting a malicious page ...
CVE-2011-4256
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2011-4246
The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2011-4249
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2011-4257
RealNetworks RealPlayer is affected by CVE-2011-4257 due to the Cook codec channel data parsing. The vulnerability exists in RealPlayer before 15.0.0, where crafted channel data can trigger a condition that enables remote code execution. Reports describe an overflow/memory corruption scenario dur...
CVE-2011-4246
The CVE-2011-4246 entry concerns the AAC codec in RealNetworks RealPlayer prior to 15.0.0 and Mac RealPlayer prior to 12.0.0.1703. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Connected sources confirm RealPlayer vu...
CVE-2011-4255
CVE-2011-4255 affects RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703. A vulnerability in processing an invalid codec name could allow remote code execution. The advisory indicates exploitation requires user interaction (visiting a malicious page or opening a crafted f...
CVE-2011-4252
CVE-2011-4252 affects RealNetworks RealPlayer (Windows and Mac) where the RV10 codec parses a height value from a RealVideo object. The flaw allows memory corruption and remote code execution if a user opens a crafted sample or visits a malicious page. Public details indicate exploitation require...
CVE-2011-4256
CVE-2011-4256 affects RealNetworks RealPlayer (RV30 codec). The vulnerability occurs when parsing RV30 samples: the code allocates a buffer then fails to fully initialize it and improperly trusts an index from the partially filled buffer, enabling memory corruption that can lead to remote code ex...
CVE-2011-4253
CVE-2011-4253 affects RealNetworks RealPlayer (RV20 decoding) on Windows and Mac. The vulnerability stems from how RV20 sample data is allocated and partially filled, leading to using uninitialized data as an index, enabling remote code execution under RealPlayer’s process. Exploitation requires ...
CVE-2011-4250
CVE-2011-4250 affects RealNetworks RealPlayer (Windows <15.0.0; Mac