CVE-2011-1525: realnetworks realplayer
Vulnerability summary
CVE-2011-1525 is a high (CVSS 9.3) vulnerability in realnetworks realplayer. EPSS estimates a 11.91% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 3 public exploits are recorded.
Public exploit (exploit-database, 21-03-2011)
Source freshness unavailable
How is this decided?Timeline
- 06-04-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
11.91%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
No change 0.00 pp
From 11.91% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
3 foundExploit Reference (aluigi.org)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
RealPlayer 14.0.1.633 - Heap Overflow
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Realnetworks1 product
- realplayer≤ 14.0.1.633 | 4 | 5 | 6 | 7 | 8 | 10.0 | 10.5 | 11.0 | 11.0.1 | 11.0.2 | 11.0.2.1744 | 11.0.2.2315 | 11.0.3 | 11.0.4 | 11.0.5 | 11.1 | 11.1.3 | 11_build_6.0.14.748 | 12.0.0.1444 | 12.0.0.1548 | 14.0.0 | 14.0.1 | 14.0.1.609
1 vendor · 1 product
References
10 links- service.real.com/realplayer/security/04122011_player/en/X Refsource CONFIRM