10

CVE-2011-4256

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Realnetworks ≫ Realplayer Edition mac_os Version <= 12.0.0.1701
Realnetworks ≫ Realplayer Version 7.0 Edition mac_os
Realnetworks ≫ Realplayer Version 8.0 Edition mac_os
Realnetworks ≫ Realplayer Version 10.0 Edition mac_os_x
Realnetworks ≫ Realplayer Version 10.0.0.305 Edition mac_os
Realnetworks ≫ Realplayer Version 10.0.0.331 Edition mac_os
Realnetworks ≫ Realplayer Version 10.1 Edition mac_os_x
Realnetworks ≫ Realplayer Version 12.0.0.1569 Edition mac_os
Realnetworks ≫ Realplayer Version <= 14.0.7
Realnetworks ≫ Realplayer Version 4
Realnetworks ≫ Realplayer Version 5
Realnetworks ≫ Realplayer Version 6
Realnetworks ≫ Realplayer Version 7
Realnetworks ≫ Realplayer Version 8
Realnetworks ≫ Realplayer Version 10.0
Realnetworks ≫ Realplayer Version 10.5
Realnetworks ≫ Realplayer Version 11.0
Realnetworks ≫ Realplayer Version 11.0.1
Realnetworks ≫ Realplayer Version 11.0.2
Realnetworks ≫ Realplayer Version 11.0.2.1744
Realnetworks ≫ Realplayer Version 11.0.2.2315
Realnetworks ≫ Realplayer Version 11.0.3
Realnetworks ≫ Realplayer Version 11.0.4
Realnetworks ≫ Realplayer Version 11.0.5
Realnetworks ≫ Realplayer Version 11.1
Realnetworks ≫ Realplayer Version 11.1.3
Realnetworks ≫ Realplayer Version 11_build_6.0.14.748
Realnetworks ≫ Realplayer Version 12.0.0.1444
Realnetworks ≫ Realplayer Version 12.0.0.1548
Realnetworks ≫ Realplayer Version 14.0.0
Realnetworks ≫ Realplayer Version 14.0.1
Realnetworks ≫ Realplayer Version 14.0.1.609
Realnetworks ≫ Realplayer Version 14.0.1.633
Realnetworks ≫ Realplayer Version 14.0.2
Realnetworks ≫ Realplayer Version 14.0.3
Realnetworks ≫ Realplayer Version 14.0.4
Realnetworks ≫ Realplayer Version 14.0.5
Realnetworks ≫ Realplayer Version 14.0.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.26% 0.899
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://service.real.com/realplayer/security/11182011_player/en/
Vendor Advisory