CVE-2012-0922 rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
HighCVSS 9.3
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 14.0.0 | No fix listed |
| realnetworks realplayer | = 14.0.1 | No fix listed |
| realnetworks realplayer | = 14.0.1.609 | No fix listed |
| realnetworks realplayer | = 14.0.1.633 | No fix listed |
| realnetworks realplayer | = 14.0.2 | No fix listed |
| realnetworks realplayer | = 14.0.3 | No fix listed |
| realnetworks realplayer | = 14.0.4 | No fix listed |
| realnetworks realplayer | = 14.0.5 | No fix listed |
| realnetworks realplayer | = 14.0.6 | No fix listed |
| realnetworks realplayer | = 14.0.7 | No fix listed |
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.0.1 | No fix listed |
| realnetworks realplayer | = 11.0.2 | No fix listed |
| realnetworks realplayer | = 11.0.2.1744 | No fix listed |
| realnetworks realplayer | = 11.0.2.2315 | No fix listed |
| realnetworks realplayer | = 11.0.3 | No fix listed |
| realnetworks realplayer | = 11.0.4 | No fix listed |
| realnetworks realplayer | = 11.0.5 | No fix listed |
| realnetworks realplayer | = 11.1 | No fix listed |
| realnetworks realplayer | = 11.1.3 | No fix listed |
| realnetworks realplayer | = 11_build_6.0.14.748 | No fix listed |
| realnetworks realplayer | = 15.0.0 | No fix listed |
| realnetworks realplayer | = 15.0.1.13 | No fix listed |
| realnetworks realplayer sp | = 1.0.0 | No fix listed |
| realnetworks realplayer sp | = 1.0.1 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer sp | = 1.0.2 | No fix listed |
| realnetworks realplayer sp | = 1.0.5 | No fix listed |
| realnetworks realplayer sp | = 1.1 | No fix listed |
| realnetworks realplayer sp | = 1.1.1 | No fix listed |
| realnetworks realplayer sp | = 1.1.2 | No fix listed |
| realnetworks realplayer sp | = 1.1.3 | No fix listed |
| realnetworks realplayer sp | = 1.1.4 | No fix listed |
| realnetworks realplayer sp | = 1.1.5 | No fix listed |
References
- 78911 vdb-entry
- 47896 third-party-advisory
- service.real.com vendor-advisory
- 51883 vdb-entry
- realplayer-rmff-code-execution(73018) vdb-entry