Approved changes feed: RSS · Atom

cpe:2.3:a:realnetworks:realplayer:7:*:*:*:*:*:*:*

part: a version: 7 update: *

VendorRealnetworks (944b0662-a257-59bc-8fc3-d9f6c6d401e0)
ProductRealplayer (51c5929e-545a-5233-af39-c6f980255b80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7260 vulnerable 2026-06-03 14:33:34.397499 Details available
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.
Published: 2014-01-03T20:00:00.000Z
Updated: 2024-08-06T18:01:20.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3299 vulnerable 2026-06-03 14:33:06.558412 Details available
RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.
Published: 2013-07-06T10:00:00.000Z
Updated: 2024-09-17T00:22:06.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1750 vulnerable 2026-06-03 14:32:51.443594 Details available
Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4 file.
Published: 2013-03-20T18:00:00.000Z
Updated: 2024-09-16T22:40:03.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5691 vulnerable 2026-06-03 14:32:31.776647 Details available
Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.
Published: 2012-12-19T11:00:00.000Z
Updated: 2024-09-16T20:32:36.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5690 vulnerable 2026-06-03 14:32:31.755585 Details available
RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.
Published: 2012-12-19T11:00:00.000Z
Updated: 2024-09-16T17:08:26.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3234 vulnerable 2026-06-03 14:31:56.926812 Details available
RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:57:50.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2411 vulnerable 2026-06-03 14:31:53.164878 Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.
Published: 2012-05-18T18:00:00.000Z
Updated: 2024-08-06T19:34:25.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2410 vulnerable 2026-06-03 14:31:53.163646 Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2409.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:25.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2409 vulnerable 2026-06-03 14:31:53.162488 Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:25.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2408 vulnerable 2026-06-03 14:31:53.161187 Details available
The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:25.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2407 vulnerable 2026-06-03 14:31:53.153813 Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:24.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2406 vulnerable 2026-06-03 14:31:53.132391 Details available
RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.
Published: 2012-05-18T18:00:00.000Z
Updated: 2024-08-06T19:34:25.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1904 vulnerable 2026-06-03 14:31:44.998719 Details available
mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.
Published: 2012-03-28T10:00:00.000Z
Updated: 2024-08-06T19:17:26.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4262 vulnerable 2026-06-03 14:31:23.593265 Details available
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T18:09:12.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4261 vulnerable 2026-06-03 14:31:23.592425 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T04:04:51.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4260 vulnerable 2026-06-03 14:31:23.591505 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T03:37:53.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4259 vulnerable 2026-06-03 14:31:23.590658 Details available
Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T22:55:34.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4258 vulnerable 2026-06-03 14:31:23.589772 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T16:28:11.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4257 vulnerable 2026-06-03 14:31:23.588925 Details available
The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T23:31:59.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4256 vulnerable 2026-06-03 14:31:23.587996 Details available
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T18:43:41.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4255 vulnerable 2026-06-03 14:31:23.586966 Details available
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T23:56:04.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4254 vulnerable 2026-06-03 14:31:23.585873 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T19:36:54.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4253 vulnerable 2026-06-03 14:31:23.585013 Details available
Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T04:09:08.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4252 vulnerable 2026-06-03 14:31:23.583915 Details available
The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T01:05:38.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4251 vulnerable 2026-06-03 14:31:23.582892 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T01:22:04.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4250 vulnerable 2026-06-03 14:31:23.582049 Details available
Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T22:03:36.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4249 vulnerable 2026-06-03 14:31:23.580934 Details available
Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T02:41:43.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4248 vulnerable 2026-06-03 14:31:23.580062 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T00:20:36.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4247 vulnerable 2026-06-03 14:31:23.579124 Details available
RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-17T00:17:10.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4246 vulnerable 2026-06-03 14:31:23.578226 Details available
The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T19:19:20.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4245 vulnerable 2026-06-03 14:31:23.576961 Details available
The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T17:29:02.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4244 vulnerable 2026-06-03 14:31:23.556788 Details available
Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2011-11-24T11:00:00.000Z
Updated: 2024-09-16T20:16:31.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1525 vulnerable 2026-06-03 14:31:02.210295 Details available
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
Published: 2011-04-06T16:00:00.000Z
Updated: 2024-08-06T22:28:41.804Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.