RealNetworks RealPlayer SP 1.1.4
Approved changes feed: RSS · Atom
cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*
part: a version: 1.1.4 update: *
| Vendor | Realnetworks (944b0662-a257-59bc-8fc3-d9f6c6d401e0) |
|---|---|
| Product | Realplayer Sp (a25744cb-bb15-5d15-948e-8910f3b0dbf9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4974 |
vulnerable | 2026-06-03 14:33:20.193419 |
Details available
RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file.
Published: 2013-08-27T01:00:00.000Z
Updated: 2024-08-06T16:59:41.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4973 |
vulnerable | 2026-06-03 14:33:20.191627 |
Details available
Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file.
Published: 2013-08-27T01:00:00.000Z
Updated: 2024-08-06T16:59:41.224Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1750 |
vulnerable | 2026-06-03 14:32:51.465836 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4 file.
Published: 2013-03-20T18:00:00.000Z
Updated: 2024-09-16T22:40:03.403Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5691 |
vulnerable | 2026-06-03 14:32:31.777283 |
Details available
Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.
Published: 2012-12-19T11:00:00.000Z
Updated: 2024-09-16T20:32:36.375Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5690 |
vulnerable | 2026-06-03 14:32:31.775497 |
Details available
RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.
Published: 2012-12-19T11:00:00.000Z
Updated: 2024-09-16T17:08:26.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3234 |
vulnerable | 2026-06-03 14:31:56.927419 |
Details available
RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:57:50.255Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2411 |
vulnerable | 2026-06-03 14:31:53.165443 |
Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.
Published: 2012-05-18T18:00:00.000Z
Updated: 2024-08-06T19:34:25.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2410 |
vulnerable | 2026-06-03 14:31:53.164185 |
Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2409.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:25.309Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2409 |
vulnerable | 2026-06-03 14:31:53.163031 |
Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:25.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2408 |
vulnerable | 2026-06-03 14:31:53.161748 |
Details available
The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:25.814Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2407 |
vulnerable | 2026-06-03 14:31:53.158964 |
Details available
Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking.
Published: 2012-09-12T10:00:00.000Z
Updated: 2024-08-06T19:34:24.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2406 |
vulnerable | 2026-06-03 14:31:53.150549 |
Details available
RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.
Published: 2012-05-18T18:00:00.000Z
Updated: 2024-08-06T19:34:25.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0928 |
vulnerable | 2026-06-03 14:31:40.372193 |
Details available
The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-09-16T23:22:15.983Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0927 |
vulnerable | 2026-06-03 14:31:40.371281 |
Details available
Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-08-06T18:38:15.049Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0926 |
vulnerable | 2026-06-03 14:31:40.370273 |
Details available
The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-08-06T18:38:15.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0925 |
vulnerable | 2026-06-03 14:31:40.369313 |
Details available
Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-08-06T18:38:15.048Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0924 |
vulnerable | 2026-06-03 14:31:40.368198 |
Details available
RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-08-06T18:38:15.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0923 |
vulnerable | 2026-06-03 14:31:40.367204 |
Details available
The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-08-06T18:38:15.155Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0922 |
vulnerable | 2026-06-03 14:31:40.365595 |
Details available
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
Published: 2012-02-08T15:00:00.000Z
Updated: 2024-08-06T18:38:14.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2955 |
vulnerable | 2026-06-03 14:31:11.428327 |
Details available
Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via vectors related to a modal dialog.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:32.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2954 |
vulnerable | 2026-06-03 14:31:11.427680 |
Details available
Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:32.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2953 |
vulnerable | 2026-06-03 14:31:11.426937 |
Details available
An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2952 |
vulnerable | 2026-06-03 14:31:11.426086 |
Details available
Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via vectors related to a dialog box.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2951 |
vulnerable | 2026-06-03 14:31:11.425422 |
Details available
Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted raw_data_frame field in an AAC file.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:32.040Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2950 |
vulnerable | 2026-06-03 14:31:11.424743 |
Details available
Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.952Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2949 |
vulnerable | 2026-06-03 14:31:11.423972 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2948 |
vulnerable | 2026-06-03 14:31:11.414704 |
Details available
RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2947 |
vulnerable | 2026-06-03 14:31:11.414022 |
Details available
Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:31.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2946 |
vulnerable | 2026-06-03 14:31:11.413174 |
Details available
Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:32.055Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2945 |
vulnerable | 2026-06-03 14:31:11.412495 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream.
Published: 2011-08-18T23:00:00.000Z
Updated: 2024-08-06T23:15:32.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1426 |
vulnerable | 2026-06-03 14:31:01.400965 |
Details available
The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX file.
Published: 2011-04-18T18:00:00.000Z
Updated: 2024-08-06T22:28:41.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1221 |
vulnerable | 2026-06-03 14:30:59.724835 |
Details available
Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document, a different vulnerability than CVE-2011-2947.
Published: 2011-10-04T22:00:00.000Z
Updated: 2024-09-17T02:32:51.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0694 |
vulnerable | 2026-06-03 14:30:50.624250 |
Details available
RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function.
Published: 2011-02-21T17:00:00.000Z
Updated: 2024-08-06T21:58:26.094Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4396 |
vulnerable | 2026-06-03 14:30:41.360882 |
Details available
Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4395 |
vulnerable | 2026-06-03 14:30:41.360194 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.757Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4394 |
vulnerable | 2026-06-03 14:30:41.359520 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4393 |
vulnerable | 2026-06-03 14:30:41.358790 |
Details available
Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted header in an AVI file.
Published: 2011-01-31T20:00:00.000Z
Updated: 2024-08-07T03:43:14.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4392 |
vulnerable | 2026-06-03 14:30:41.334821 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4391 |
vulnerable | 2026-06-03 14:30:41.334085 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allows remote attackers to execute arbitrary code via a crafted value in an unspecified header field in an RMX file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.547Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4390 |
vulnerable | 2026-06-03 14:30:41.333419 |
Details available
Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.778Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4389 |
vulnerable | 2026-06-03 14:30:41.332685 |
Details available
Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.630Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4388 |
vulnerable | 2026-06-03 14:30:41.332012 |
Details available
The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.720Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4387 |
vulnerable | 2026-06-03 14:30:41.331269 |
Details available
The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4386 |
vulnerable | 2026-06-03 14:30:41.330504 |
Details available
RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.753Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4385 |
vulnerable | 2026-06-03 14:30:41.329819 |
Details available
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.639Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4383 |
vulnerable | 2026-06-03 14:30:41.328552 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted RA5 file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.570Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4382 |
vulnerable | 2026-06-03 14:30:41.327802 |
Details available
Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.658Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4381 |
vulnerable | 2026-06-03 14:30:41.327007 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4380 |
vulnerable | 2026-06-03 14:30:41.326325 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4379 |
vulnerable | 2026-06-03 14:30:41.325627 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.748Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4378 |
vulnerable | 2026-06-03 14:30:41.321642 |
Details available
The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4377 |
vulnerable | 2026-06-03 14:30:41.319739 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T03:43:14.910Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3751 |
vulnerable | 2026-06-03 14:30:33.034628 |
Details available
Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 allow remote attackers to execute arbitrary code via a long .smil argument to the (1) tfile, (2) pnmm, or (3) cdda protocol handler.
Published: 2010-10-18T22:00:00.000Z
Updated: 2024-09-16T16:33:17.344Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3750 |
vulnerable | 2026-06-03 14:30:33.034007 |
Details available
rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly validate file contents that are used during interaction with a heap buffer, which allows remote attackers to execute arbitrary code via crafted Name Value Property (NVP) elements in logical streams in a media file.
Published: 2010-10-18T22:00:00.000Z
Updated: 2024-09-16T19:14:07.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3749 |
vulnerable | 2026-06-03 14:30:33.033290 |
Details available
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a " (double quote) in an argument to the RecordClip method, aka "parameter injection."
Published: 2010-10-18T22:00:00.000Z
Updated: 2024-08-07T03:18:53.214Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3748 |
vulnerable | 2026-06-03 14:30:33.032641 |
Details available
Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via unknown vectors.
Published: 2010-10-18T22:00:00.000Z
Updated: 2024-09-16T20:32:48.427Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3747 |
vulnerable | 2026-06-03 14:30:33.032012 |
Details available
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI.
Published: 2010-10-18T22:00:00.000Z
Updated: 2024-08-07T03:18:53.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3001 |
vulnerable | 2026-06-03 14:30:28.783828 |
Details available
Unspecified vulnerability in an ActiveX control in the Internet Explorer (IE) plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T02:55:46.384Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3000 |
vulnerable | 2026-06-03 14:30:28.783250 |
Details available
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T02:55:46.403Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2579 |
vulnerable | 2026-06-03 14:30:26.200515 |
Details available
The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified "memory access" via unknown vectors.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T02:39:36.880Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2578 |
vulnerable | 2026-06-03 14:30:26.199237 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted QCP file.
Published: 2010-10-18T22:00:00.000Z
Updated: 2024-09-17T03:47:59.229Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0125 |
vulnerable | 2026-06-03 14:30:02.271265 |
Details available
RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T00:37:54.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0121 |
vulnerable | 2026-06-03 14:30:02.261157 |
Details available
The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors.
Published: 2010-12-14T15:00:00.000Z
Updated: 2024-08-07T00:37:53.873Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0120 |
vulnerable | 2026-06-03 14:30:02.260486 |
Details available
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T00:37:54.076Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0117 |
vulnerable | 2026-06-03 14:30:02.249731 |
Details available
RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T00:37:54.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0116 |
vulnerable | 2026-06-03 14:30:02.249014 |
Details available
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T00:37:53.922Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.