Approved changes feed: RSS · Atom

cpe:2.3:a:realnetworks:realplayer:2.1.5:*:enterprise:*:*:*:*:*

part: a version: 2.1.5 update: *

VendorRealnetworks (944b0662-a257-59bc-8fc3-d9f6c6d401e0)
ProductRealplayer (51c5929e-545a-5233-af39-c6f980255b80)
Editionenterprise
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2955 vulnerable 2026-06-08 04:58:09.834404 Details available
Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via vectors related to a modal dialog.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:32.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2953 vulnerable 2026-06-08 04:58:09.832986 Details available
An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2952 vulnerable 2026-06-08 04:58:09.832224 Details available
Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via vectors related to a dialog box.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2949 vulnerable 2026-06-08 04:58:09.830037 Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2948 vulnerable 2026-06-08 04:58:09.820989 Details available
RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2946 vulnerable 2026-06-08 04:58:09.819445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1221 vulnerable 2026-06-08 04:57:57.208676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.