Realnetworks vulnerabilities, page 3
212 vulnerabilities
Known vulnerabilities in Realnetworks products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 27 products.
RoutineCVE-2012-0924realnetworks · realplayer +1 morerealnetworks realplayerRealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.CVSS9.3CriticalEPSS3.68%RoutineCVE-2012-0923realnetworks · realplayer +1 morerealnetworks realplayerThe RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.CVSS9.3CriticalEPSS4.48%RoutineCVE-2012-0922realnetworks · realplayer +1 morerealnetworks realplayerrvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.CVSS9.3CriticalEPSS4.49%RoutineCVE-2011-4262realnetworks · realplayerrealnetworks realplayerUnspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file.CVSS9.3CriticalEPSS3.65%RoutineCVE-2011-4261realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.CVSS9.3CriticalEPSS2.83%RoutineCVE-2011-4260realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.CVSS9.3CriticalEPSS2.89%RoutineCVE-2011-4259realnetworks · realplayerrealnetworks realplayerInteger underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file.CVSS9.3CriticalEPSS2.89%RoutineCVE-2011-4258realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.CVSS9.3CriticalEPSS3.65%RoutineCVE-2011-4257realnetworks · realplayerrealnetworks realplayerThe Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data.CVSS9.3CriticalEPSS2.89%RoutineCVE-2011-4256realnetworks · realplayerrealnetworks realplayerThe RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.CVSS10.0CriticalEPSS4.25%RoutineCVE-2011-4255realnetworks · realplayerrealnetworks realplayerUnspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name.CVSS10.0CriticalEPSS4.11%RoutineCVE-2011-4254realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.CVSS10.0CriticalEPSS3.37%RoutineCVE-2011-4253realnetworks · realplayerrealnetworks realplayerUnspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.CVSS10.0CriticalEPSS4.11%RoutineCVE-2011-4252realnetworks · realplayerrealnetworks realplayerThe RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.CVSS9.3CriticalEPSS3.65%RoutineCVE-2011-4251realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.CVSS9.3CriticalEPSS2.89%RoutineCVE-2011-4250realnetworks · realplayerrealnetworks realplayerUnspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.CVSS10.0CriticalEPSS4.11%RoutineCVE-2011-4249realnetworks · realplayerrealnetworks realplayerArray index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.CVSS10.0CriticalEPSS3.25%RoutineCVE-2011-4248realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file.CVSS9.3CriticalEPSS3.65%RoutineCVE-2011-4247realnetworks · realplayerrealnetworks realplayerRealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream.CVSS9.3CriticalEPSS2.89%RoutineCVE-2011-4246realnetworks · realplayerrealnetworks realplayerThe AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVSS10.0CriticalEPSS4.02%