CVEvulnerability

CVE-2012-0922

9.3 HIGH Published 2012-02-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-02-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.

Affected configurations

• realnetworks realplayer 14.0.0 • realnetworks realplayer 14.0.1 • realnetworks realplayer 14.0.1.609 • realnetworks realplayer 14.0.1.633 • realnetworks realplayer 14.0.2 • realnetworks realplayer 14.0.3 • realnetworks realplayer 14.0.4 • realnetworks realplayer 14.0.5 • realnetworks realplayer 14.0.6 • realnetworks realplayer 14.0.7 • realnetworks realplayer 11.0 • realnetworks realplayer 11.0.1 • realnetworks realplayer 11.0.2 • realnetworks realplayer 11.0.2.1744 • realnetworks realplayer 11.0.2.2315 • realnetworks realplayer 11.0.3 • realnetworks realplayer 11.0.4 • realnetworks realplayer 11.0.5 • realnetworks realplayer 11.1 • realnetworks realplayer 11.1.3 • realnetworks realplayer 11 build 6.0.14.748 • realnetworks realplayer 15.0.0 • realnetworks realplayer 15.0.1.13 • realnetworks realplayer sp 1.0.0 • realnetworks realplayer sp 1.0.1 • realnetworks realplayer sp 1.0.2 • realnetworks realplayer sp 1.0.5 • realnetworks realplayer sp 1.1 • realnetworks realplayer sp 1.1.1 • realnetworks realplayer sp 1.1.2 • realnetworks realplayer sp 1.1.3 • realnetworks realplayer sp 1.1.4 • realnetworks realplayer sp 1.1.5

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References