rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
21 Nov 2024, 01:35
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/78911 - | |
References | () http://secunia.com/advisories/47896 - | |
References | () http://service.real.com/realplayer/security/02062012_player/en/ - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/51883 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/73018 - |
Information
Published : 2012-02-08 15:55
Updated : 2024-11-21 01:35
NVD link : CVE-2012-0922
Mitre link : CVE-2012-0922
CVE.ORG link : CVE-2012-0922
JSON object : View
Products Affected
realnetworks
- realplayer_sp
- realplayer
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')