Vulnerability Details CVE-2011-1525
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.394
EPSS Ranking 97.1%
CVSS Severity
CVSS v2 Score 9.3
References
- http://aluigi.org/adv/real_5-adv.txt
- http://osvdb.org/71260
- http://secunia.com/advisories/43847
- http://securityreason.com/securityalert/8181
- http://service.real.com/realplayer/security/04122011_player/en/
- http://www.exploit-db.com/exploits/17019
- http://www.securityfocus.com/archive/1/517083/100/0/threaded
- http://www.securityfocus.com/bid/46946
- http://www.securitytracker.com/id?1025245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66209
- http://aluigi.org/adv/real_5-adv.txt
- http://osvdb.org/71260
- http://secunia.com/advisories/43847
- http://securityreason.com/securityalert/8181
- http://service.real.com/realplayer/security/04122011_player/en/
- http://www.exploit-db.com/exploits/17019
- http://www.securityfocus.com/archive/1/517083/100/0/threaded
- http://www.securityfocus.com/bid/46946
- http://www.securitytracker.com/id?1025245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66209
Products affected by CVE-2011-1525
-
cpe:2.3:a:realnetworks:realplayer:-
-
cpe:2.3:a:realnetworks:realplayer:10.0
-
cpe:2.3:a:realnetworks:realplayer:10.0.6
-
cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690
-
cpe:2.3:a:realnetworks:realplayer:10.5
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040
-
cpe:2.3:a:realnetworks:realplayer:11.0
-
cpe:2.3:a:realnetworks:realplayer:11.0.1
-
cpe:2.3:a:realnetworks:realplayer:11.0.2
-
cpe:2.3:a:realnetworks:realplayer:11.0.2.1744
-
cpe:2.3:a:realnetworks:realplayer:11.0.2.2315
-
cpe:2.3:a:realnetworks:realplayer:11.0.3
-
cpe:2.3:a:realnetworks:realplayer:11.0.4
-
cpe:2.3:a:realnetworks:realplayer:11.0.5
-
cpe:2.3:a:realnetworks:realplayer:11.1
-
cpe:2.3:a:realnetworks:realplayer:11.1.3
-
cpe:2.3:a:realnetworks:realplayer:11_build_6.0.14.748
-
cpe:2.3:a:realnetworks:realplayer:12.0.0.1444
-
cpe:2.3:a:realnetworks:realplayer:12.0.0.1548
-
cpe:2.3:a:realnetworks:realplayer:12.0.1.1737
-
cpe:2.3:a:realnetworks:realplayer:12.0.1.1738
-
cpe:2.3:a:realnetworks:realplayer:14.0.0
-
cpe:2.3:a:realnetworks:realplayer:14.0.1
-
cpe:2.3:a:realnetworks:realplayer:14.0.1.609
-
cpe:2.3:a:realnetworks:realplayer:2.1.2
-
cpe:2.3:a:realnetworks:realplayer:2.1.3
-
cpe:2.3:a:realnetworks:realplayer:2.1.4
-
cpe:2.3:a:realnetworks:realplayer:4
-
cpe:2.3:a:realnetworks:realplayer:5
-
cpe:2.3:a:realnetworks:realplayer:6
-
cpe:2.3:a:realnetworks:realplayer:7
-
cpe:2.3:a:realnetworks:realplayer:8
-
cpe:2.3:a:realnetworks:realplayer:8.0