PT-2011-4909

CVE-2011-4256

·

Published

2011-11-24

·

Updated

2012-03-08

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 RealPlayer (Mac) versions prior to 12.0.0.1703
Description The issue concerns the RV30 codec in RealPlayer, which does not initialize an unspecified index value. This allows remote attackers to execute arbitrary code via unknown vectors.
Recommendations For RealPlayer versions prior to 15.0.0, update to version 15.0.0 or later. For RealPlayer (Mac) versions prior to 12.0.0.1703, update to version 12.0.0.1703 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-11-337
Found an issue in the description? Have something to add? Feel free to write us 👾