1512 matches found
Code injection
The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file...
CVE-2012-0925
Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...
CVE-2012-0923
The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream...
CVE-2012-0924
RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJSTARTCODE code in a header within a video stream...
CVE-2012-0927
Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the codedframesize value in a RealAudio audio stream...
CVE-2012-0923
The CVE-2012-0923 entry corresponds to a RealPlayer RV20 RealVideo vulnerability. Connected sources provide concrete details: RealPlayer 11.x, 14.x and 15.x (before 15.02.71) and RealPlayer SP 1.0–1.1.5 are affected. The root cause is improper handling/bounds checking of a frame size array during...
CVE-2012-0928
The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file...
CVE-2012-0925
RealPlayer RV40 remote code execution vulnerability (CVE-2012-0925) affects RealPlayer 11.x, 14.x, 15.x before 15.02.71 and RealPlayer SP 1.0–1.1.5. The flaw is in rv40.dll when parsing RV40 sample data, where a miscalculated offset can lead to arbitrary code execution. Exploitation requires a us...
CVE-2012-0927
CVE-2012-0927 affects RealNetworks RealPlayer 11.x, 14.x and 15.x prior to 15.02.71, and RealPlayer SP 1.0–1.1.5. The flaw resides in the RealAudio stream’s coded_frame_size handling (cook.dll); the parsed RA2 header uses coded_frame_size to allocate memory, which is not properly verified, enabli...
CVE-2012-0926
The CVE-2012-0926 vulnerability affects RealNetworks RealPlayer: the RV10 RealVideo stream handling in RealPlayer 11.x, 14.x, 15.x (and RealPlayer SP 1.0–1.1.5) fails to validate height/width fields, allowing remote code execution via a crafted RV10 video. Root cause is miscalculation of an offse...
CVE-2012-0922
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file...
CVE-2012-0926
The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream...
CVE-2012-0928
The CVE-2012-0928 entry affects RealNetworks RealPlayer: ATRAC decoding in RealPlayer 11.x and 14.x up to 14.0.7, RealPlayer SP 1.0–1.1.5, and Mac RealPlayer 12.x prior to 12.0.0.1703. The vulnerability arises during ATRAC sample decoding, where faulty parsing of the audio data allows remote atta...
CVE-2012-0924
RealNetworks RealPlayer 11.x, 14.x and 15.x (before 15.0.2.71) and RealPlayer SP 1.0–1.1.5 are affected by a VIDOBJ_START_CODE handling flaw in MPEG streams that allows remote code execution. The vulnerability arises in the dmp4.dll decoding path when processing a VIDOBJ_START_CODE object, leadin...
CVE-2012-0927
Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the codedframesize value in a RealAudio audio stream...
CVE-2012-0924
RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJSTARTCODE code in a header within a video stream...
CVE-2012-0922
RealNetworks RealPlayer (Windows/other) is affected by CVE-2012-0922 due to a flaw in the rvrender RMFF parser. RealPlayer 11.x, 14.x, 15.x (and RealPlayer SP 1.0–1.1.5) prior to 15.02.71 allow remote code execution when a crafted RMFF file with a negative RMFF 1.0 Flags value is parsed, enabling...
CVE-2012-0923
The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream...
CVE-2012-0925
Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream...
