Realplayer SP vulnerabilities | LiveThreat CVE Feed

Product

Realplayer SP

by Realnetworks · last CVE Aug 27, 2013

CVEs

On KEV

–

Max CVSS

New 30D

Vulnerabilities82 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities82 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Realplayer SP to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2013-4974	–	4%	Aug 27	RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2013-4973	–	6%	Aug 27	Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2013-1750	–	3%	Mar 20	Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-5691	–	53%	Dec 19	Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-5690	–	3%	Dec 19	RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-3234	–	1%	Sep 12	RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-2410	–	2%	Sep 12	Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-2409	–	2%	Sep 12	Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-2408	–	2%	Sep 12	The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-2407	–	2%	Sep 12	Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-5228	–	4%	Sep 7	Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as… Affected: 1.1.5
CVE-2012-2411	–	5%	May 18	Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +13 more
CVE-2012-2406	–	5%	May 18	RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +13 more
CVE-2012-1904	–	5%	Mar 28	mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to… Affected: through 1.1.4; 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; +3 more
CVE-2012-0928	–	4%	Feb 8	The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-0927	–	4%	Feb 8	Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-0926	–	4%	Feb 8	The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-0925	–	4%	Feb 8	Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-0924	–	4%	Feb 8	RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-0923	–	4%	Feb 8	The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2012-0922	–	4%	Feb 8	rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-1221	–	1%	Oct 4	Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2955	–	4%	Aug 18	Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5,… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2954	–	4%	Aug 18	Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2953	–	3%	Aug 18	An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2952	–	4%	Aug 18	Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2951	–	5%	Aug 18	Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2950	–	29%	Aug 18	Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2949	–	5%	Aug 18	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2948	–	4%	Aug 18	RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2947	–	1%	Aug 18	Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2946	–	4%	Aug 18	Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-2945	–	4%	Aug 18	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-1426	–	5%	Apr 18	The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2011-0694	–	7%	Feb 21	RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-4393	–	7%	Jan 31	Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-4392	–	6%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-0121	–	2%	Dec 14	The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-0125	–	2%	Dec 14	RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more
CVE-2010-2579	–	1%	Dec 14	The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more
CVE-2010-2997	–	6%	Dec 14	Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and… Affected: 1.0.0; 1.0.1
CVE-2010-2999	–	6%	Dec 14	Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote… Affected: 1.0.0; 1.0.1
CVE-2010-4376	–	6%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1
CVE-2010-4377	–	6%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-4378	–	6%	Dec 14	The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +4 more
CVE-2010-4379	–	3%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more
CVE-2010-4380	–	3%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more
CVE-2010-4381	–	3%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more
CVE-2010-4382	–	3%	Dec 14	Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more
CVE-2010-4383	–	3%	Dec 14	Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444,… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.5; 1.1; 1.1.1; +3 more