Lucene search
MitreCVE-2012-0923HistoryFeb 08, 2012 - 3:55 p.m.
CVE-2012-0923
2012-02-0815:55:00
CWE-94
mitre
web.nvd.nist.gov
28
realnetworks
realplayer
cve-2012-0923
rv20 codec
remote code execution
arbitrary code
security vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.052
Percentile
93.1%
The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.
Affected configurations
Node
realnetworksrealplayerMatch14.0.0
ORrealnetworksrealplayerMatch14.0.1
ORrealnetworksrealplayerMatch14.0.1.609
ORrealnetworksrealplayerMatch14.0.1.633
ORrealnetworksrealplayerMatch14.0.2
ORrealnetworksrealplayerMatch14.0.3
ORrealnetworksrealplayerMatch14.0.4
ORrealnetworksrealplayerMatch14.0.5
ORrealnetworksrealplayerMatch14.0.6
ORrealnetworksrealplayerMatch14.0.7
Node
realnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.2.1744
ORrealnetworksrealplayerMatch11.0.2.2315
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
ORrealnetworksrealplayerMatch11.1.3
ORrealnetworksrealplayerMatch11_build_6.0.14.748
Node
realnetworksrealplayerMatch15.0.0
ORrealnetworksrealplayerMatch15.0.1.13
Node
realnetworksrealplayer_spMatch1.0.0
ORrealnetworksrealplayer_spMatch1.0.1
ORrealnetworksrealplayer_spMatch1.0.2
ORrealnetworksrealplayer_spMatch1.0.5
ORrealnetworksrealplayer_spMatch1.1
ORrealnetworksrealplayer_spMatch1.1.1
ORrealnetworksrealplayer_spMatch1.1.2
ORrealnetworksrealplayer_spMatch1.1.3
ORrealnetworksrealplayer_spMatch1.1.4
ORrealnetworksrealplayer_spMatch1.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| realnetworks | realplayer | 14.0.0 | cpe:2.3:a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.1 | cpe:2.3:a:realnetworks:realplayer:14.0.1:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.1.609 | cpe:2.3:a:realnetworks:realplayer:14.0.1.609:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.1.633 | cpe:2.3:a:realnetworks:realplayer:14.0.1.633:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.2 | cpe:2.3:a:realnetworks:realplayer:14.0.2:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.3 | cpe:2.3:a:realnetworks:realplayer:14.0.3:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.4 | cpe:2.3:a:realnetworks:realplayer:14.0.4:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.5 | cpe:2.3:a:realnetworks:realplayer:14.0.5:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.6 | cpe:2.3:a:realnetworks:realplayer:14.0.6:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.7 | cpe:2.3:a:realnetworks:realplayer:14.0.7:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2012-02-08 15:55:00
zdi
zdi
nvd
nvd
CVE-2012-0923
2012-02-08 15:55:00
cvelist
cvelist
CVE-2012-0923
2012-02-08 15:00:00
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Feb12
2012-02-21 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Feb 2012) - Windows
2012-02-21 00:00:00
nessus
nessus
Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities
2012-02-08 00:00:00
RealPlayer for Windows < 15.0.2.71 Multiple Vulnerabilities
2012-02-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.052
Percentile
93.1%
Related for CVE-2012-0923