CVE-2011-2950
high · 9.3Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.
9.3
CVSS
28.6%
EPSS (exploit prob.)
98th
EPSS percentile
2011-08-18
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| realnetworks | realplayer | 11.0 |
| realnetworks | realplayer | 11.1 |
| realnetworks | realplayer | 14.0.0 |
| realnetworks | realplayer | 14.0.1 |
| realnetworks | realplayer | 14.0.2 |
| realnetworks | realplayer | 14.0.3 |
| realnetworks | realplayer | 14.0.4 |
| realnetworks | realplayer | 14.0.5 |
| realnetworks | realplayer_sp | 1.0.0 |
| realnetworks | realplayer_sp | 1.0.1 |
| realnetworks | realplayer_sp | 1.0.2 |
| realnetworks | realplayer_sp | 1.0.5 |
| realnetworks | realplayer_sp | 1.1 |
| realnetworks | realplayer_sp | 1.1.1 |
| realnetworks | realplayer_sp | 1.1.2 |
| realnetworks | realplayer_sp | 1.1.3 |
| realnetworks | realplayer_sp | 1.1.4 |
| realnetworks | realplayer_sp | 1.1.5 |
Check a specific version with /api/v1/cve/match.
References
- http://securityreason.com/securityalert/8388
- http://service.real.com/realplayer/security/08162011_player/en/
- http://www.securityfocus.com/bid/49172
- http://www.securitytracker.com/id?1025943
- http://zerodayinitiative.com/advisories/ZDI-11-265/
- http://securityreason.com/securityalert/8388
- http://service.real.com/realplayer/security/08162011_player/en/
- http://www.securityfocus.com/bid/49172
- http://www.securitytracker.com/id?1025943
- http://zerodayinitiative.com/advisories/ZDI-11-265/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-2950