Vulnerabilities > Realnetworks > Realplayer > 12.0.0.1569

DATE CVE VULNERABILITY TITLE RISK
2012-02-08 CVE-2012-0928 Code Injection vulnerability in Realnetworks Realplayer and Realplayer SP
The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file.
network
realnetworks CWE-94
critical
9.3
2011-11-24 CVE-2011-4256 Code Injection vulnerability in Realnetworks Realplayer
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
realnetworks CWE-94
critical
10.0
2011-11-24 CVE-2011-4255 Unspecified vulnerability in Realnetworks Realplayer
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name.
network
low complexity
realnetworks
critical
10.0
2011-11-24 CVE-2011-4253 Unspecified vulnerability in Realnetworks Realplayer
Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
realnetworks
critical
10.0
2011-11-24 CVE-2011-4252 Code Injection vulnerability in Realnetworks Realplayer
The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.
network
realnetworks CWE-94
critical
9.3
2011-11-24 CVE-2011-4250 Unspecified vulnerability in Realnetworks Realplayer
Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
realnetworks
critical
10.0
2011-11-24 CVE-2011-4246 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Realnetworks Realplayer
The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
network
low complexity
realnetworks CWE-119
critical
10.0
2011-11-24 CVE-2011-4245 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Realnetworks Realplayer
The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
network
low complexity
realnetworks CWE-119
critical
10.0
2011-08-18 CVE-2011-2951 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Realnetworks Realplayer and Realplayer SP
Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted raw_data_frame field in an AAC file.
network
realnetworks CWE-119
critical
9.3
2011-08-18 CVE-2011-2948 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Realnetworks Realplayer and Realplayer SP
RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.
network
realnetworks CWE-119
critical
9.3