PT-2011-4909
CVE-2011-4256
·
Published
2011-11-24
·
Updated
2012-03-08
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
RealPlayer versions prior to 15.0.0
RealPlayer (Mac) versions prior to 12.0.0.1703
Description
The issue concerns the RV30 codec in RealPlayer, which does not initialize an unspecified index value. This allows remote attackers to execute arbitrary code via unknown vectors.
Recommendations
For RealPlayer versions prior to 15.0.0, update to version 15.0.0 or later.
For RealPlayer (Mac) versions prior to 12.0.0.1703, update to version 12.0.0.1703 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾