PT-2012-2957

CVE-2012-0927

·

Published

2012-02-08

·

Updated

2012-03-22

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5
Description The issue allows remote attackers to execute arbitrary code via vectors involving the coded frame size value in a RealAudio audio stream.
Recommendations For RealPlayer versions 11.x through 15.x before 15.02.71, update to version 15.02.71 or later. For RealPlayer SP versions 1.0 through 1.1.5, update to a version later than 1.1.5.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2012-0927
ZDI-12-049
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com