CVE-2011-1525
high · 9.3Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
9.3
CVSS
11.9%
EPSS (exploit prob.)
96th
EPSS percentile
2011-04-06
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| realnetworks | realplayer | <= 14.0.1.633 |
| realnetworks | realplayer | 4 |
| realnetworks | realplayer | 5 |
| realnetworks | realplayer | 6 |
| realnetworks | realplayer | 7 |
| realnetworks | realplayer | 8 |
| realnetworks | realplayer | 10.0 |
| realnetworks | realplayer | 10.5 |
| realnetworks | realplayer | 11.0 |
| realnetworks | realplayer | 11.0.1 |
| realnetworks | realplayer | 11.0.2 |
| realnetworks | realplayer | 11.0.2.1744 |
| realnetworks | realplayer | 11.0.2.2315 |
| realnetworks | realplayer | 11.0.3 |
| realnetworks | realplayer | 11.0.4 |
| realnetworks | realplayer | 11.0.5 |
| realnetworks | realplayer | 11.1 |
| realnetworks | realplayer | 11.1.3 |
| realnetworks | realplayer | 11_build_6.0.14.748 |
| realnetworks | realplayer | 12.0.0.1444 |
| realnetworks | realplayer | 12.0.0.1548 |
| realnetworks | realplayer | 14.0.0 |
| realnetworks | realplayer | 14.0.1 |
| realnetworks | realplayer | 14.0.1.609 |
Check a specific version with /api/v1/cve/match.
References
- http://aluigi.org/adv/real_5-adv.txt
- http://osvdb.org/71260
- http://secunia.com/advisories/43847
- http://securityreason.com/securityalert/8181
- http://service.real.com/realplayer/security/04122011_player/en/
- http://www.exploit-db.com/exploits/17019
- http://www.securityfocus.com/archive/1/517083/100/0/threaded
- http://www.securityfocus.com/bid/46946
- http://www.securitytracker.com/id?1025245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66209
- http://aluigi.org/adv/real_5-adv.txt
- http://osvdb.org/71260
- http://secunia.com/advisories/43847
- http://securityreason.com/securityalert/8181
- http://service.real.com/realplayer/security/04122011_player/en/
- http://www.exploit-db.com/exploits/17019
- http://www.securityfocus.com/archive/1/517083/100/0/threaded
- http://www.securityfocus.com/bid/46946
- http://www.securitytracker.com/id?1025245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66209
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-1525