The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
References
Link | Resource |
---|---|
http://service.real.com/realplayer/security/11182011_player/en/ | Vendor Advisory |
http://service.real.com/realplayer/security/11182011_player/en/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:32
Type | Values Removed | Values Added |
---|---|---|
References | () http://service.real.com/realplayer/security/11182011_player/en/ - Vendor Advisory |
Information
Published : 2011-11-24 11:55
Updated : 2024-11-21 01:32
NVD link : CVE-2011-4256
Mitre link : CVE-2011-4256
CVE.ORG link : CVE-2011-4256
JSON object : View
Products Affected
realnetworks
- realplayer
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')