Lucene search
MitreCVE-2012-0927HistoryFeb 08, 2012 - 3:55 p.m.
CVE-2012-0927
2012-02-0815:55:00
CWE-94
mitre
web.nvd.nist.gov
34
cve-2012-0927
realnetworks
realplayer
remote code execution
audio stream
vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.01
Percentile
84.0%
Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream.
Affected configurations
Node
realnetworksrealplayerMatch14.0.0
ORrealnetworksrealplayerMatch14.0.1
ORrealnetworksrealplayerMatch14.0.1.609
ORrealnetworksrealplayerMatch14.0.1.633
ORrealnetworksrealplayerMatch14.0.2
ORrealnetworksrealplayerMatch14.0.3
ORrealnetworksrealplayerMatch14.0.4
ORrealnetworksrealplayerMatch14.0.5
ORrealnetworksrealplayerMatch14.0.6
ORrealnetworksrealplayerMatch14.0.7
Node
realnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.2.1744
ORrealnetworksrealplayerMatch11.0.2.2315
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
ORrealnetworksrealplayerMatch11.1.3
ORrealnetworksrealplayerMatch11_build_6.0.14.748
Node
realnetworksrealplayerMatch15.0.0
ORrealnetworksrealplayerMatch15.0.1.13
Node
realnetworksrealplayer_spMatch1.0.0
ORrealnetworksrealplayer_spMatch1.0.1
ORrealnetworksrealplayer_spMatch1.0.2
ORrealnetworksrealplayer_spMatch1.0.5
ORrealnetworksrealplayer_spMatch1.1
ORrealnetworksrealplayer_spMatch1.1.1
ORrealnetworksrealplayer_spMatch1.1.2
ORrealnetworksrealplayer_spMatch1.1.3
ORrealnetworksrealplayer_spMatch1.1.4
ORrealnetworksrealplayer_spMatch1.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| realnetworks | realplayer | 14.0.0 | cpe:2.3:a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.1 | cpe:2.3:a:realnetworks:realplayer:14.0.1:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.1.609 | cpe:2.3:a:realnetworks:realplayer:14.0.1.609:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.1.633 | cpe:2.3:a:realnetworks:realplayer:14.0.1.633:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.2 | cpe:2.3:a:realnetworks:realplayer:14.0.2:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.3 | cpe:2.3:a:realnetworks:realplayer:14.0.3:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.4 | cpe:2.3:a:realnetworks:realplayer:14.0.4:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.5 | cpe:2.3:a:realnetworks:realplayer:14.0.5:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.6 | cpe:2.3:a:realnetworks:realplayer:14.0.6:*:*:*:*:*:*:* |
| realnetworks | realplayer | 14.0.7 | cpe:2.3:a:realnetworks:realplayer:14.0.7:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-0927
2012-02-08 15:00:00
prion
prion
Code injection
2012-02-08 15:55:00
zdi
zdi
RealNetworks RealPlayer RealAudio coded_frame_size Remote Code Execution
2012-03-22 00:00:00
nvd
nvd
CVE-2012-0927
2012-02-08 15:55:00
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Feb12
2012-02-21 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Feb 2012) - Windows
2012-02-21 00:00:00
nessus
nessus
Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities
2012-02-08 00:00:00
RealPlayer for Windows < 15.0.2.71 Multiple Vulnerabilities
2012-02-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.01
Percentile
84.0%
Related for CVE-2012-0927