CVE-2011-1525 Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary cod...
HighCVSS 9.3
EPSS 11.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | <= 14.0.1.633 | No fix listed |
| realnetworks realplayer | = 4 | No fix listed |
| realnetworks realplayer | = 5 | No fix listed |
| realnetworks realplayer | = 6 | No fix listed |
| realnetworks realplayer | = 7 | No fix listed |
| realnetworks realplayer | = 8 | No fix listed |
| realnetworks realplayer | = 10.0 | No fix listed |
| realnetworks realplayer | = 10.5 | No fix listed |
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.0.1 | No fix listed |
| realnetworks realplayer | = 11.0.2 | No fix listed |
| realnetworks realplayer | = 11.0.2.1744 | No fix listed |
| realnetworks realplayer | = 11.0.2.2315 | No fix listed |
| realnetworks realplayer | = 11.0.3 | No fix listed |
| realnetworks realplayer | = 11.0.4 | No fix listed |
| realnetworks realplayer | = 11.0.5 | No fix listed |
| realnetworks realplayer | = 11.1 | No fix listed |
| realnetworks realplayer | = 11.1.3 | No fix listed |
| realnetworks realplayer | = 11_build_6.0.14.748 | No fix listed |
| realnetworks realplayer | = 12.0.0.1444 | No fix listed |
| realnetworks realplayer | = 12.0.0.1548 | No fix listed |
| realnetworks realplayer | = 14.0.0 | No fix listed |
| realnetworks realplayer | = 14.0.1 | No fix listed |
| realnetworks realplayer | = 14.0.1.609 | No fix listed |
References
- aluigi.org exploit
- 71260 vdb-entry
- 43847 third-party-advisory vendor-advisory
- 8181 third-party-advisory
- service.real.com
- 17019 exploit
- 20110321 Heap overflow in RealPlayer 14.0.1.633 mailing-list
- 46946 exploit vdb-entry
- 1025245 vdb-entry
- realplayer-ivr-bo(66209) vdb-entry