GCVE - cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*

part: a version: 11 update: *

Vendor	Realnetworks (`944b0662-a257-59bc-8fc3-d9f6c6d401e0`)
Product	Realplayer (`51c5929e-545a-5233-af39-c6f980255b80`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0376`	vulnerable	2026-06-03 14:29:23.897223	Details available Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plugin. Published: 2009-02-08T21:00:00.000Z Updated: 2024-08-07T04:31:25.916Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/509097/100/0/threaded http://www.vupen.com/english/advisories/2010/0178 http://service.real.com/realplayer/security/01192010_player/en/ https://exchange.xforce.ibmcloud.com/vulnerabilities/48568 http://www.fortiguardcenter.com/advisory/FGA-2009-04.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0375`	vulnerable	2026-06-03 14:29:23.896758	Details available Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a filename length field containing a large integer, which triggers overwrite of an arbitrary memory location with a 0x00 byte value, related to use of RealPlayer through a Windows Explorer plugin. Published: 2009-02-08T21:00:00.000Z Updated: 2024-08-07T04:31:26.226Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/0178 http://service.real.com/realplayer/security/01192010_player/en/ http://www.fortiguardcenter.com/advisory/FGA-2009-04.html http://secunia.com/advisories/33810 https://exchange.xforce.ibmcloud.com/vulnerabilities/48567	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1309`	vulnerable	2026-06-03 14:28:40.116903	Details available The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory. Published: 2008-03-12T17:00:00.000Z Updated: 2024-08-07T08:17:33.628Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/41087 http://www.vupen.com/english/advisories/2008/2194/references http://service.real.com/realplayer/security/07252008_player/en/ http://secunia.com/advisories/29315 http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6235`	vulnerable	2026-06-03 14:28:29.151349	Details available A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904. Published: 2007-12-04T18:00:00.000Z Updated: 2024-08-07T16:02:34.823Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/484449/100/0/threaded https://www.exploit-db.com/exploits/4683 http://www.safehack.com/Advisory/realpdos_au.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.