Realplayer vulnerabilities | LiveThreat CVE Feed

Product

Realplayer

by Realnetworks · last CVE Jun 5, 2022

170

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities170 In the news0 Timeline

Severity mix

Critical 3High 1Medium 2Low 0

Severity

All severities170 Critical3 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Realplayer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-32270	9.8	5%	Jun 3	In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution Affected: 20.0.7.309; 20.0.8.310
CVE-2022-32269	9.8	4%	Jun 3	In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core) Affected: 20.0.8.310
CVE-2022-32271	9.6	3%	Jun 3	In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability Affected: 20.0.8.310
CVE-2022-32291	8.8	2%	Jun 5	In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file Affected: through 20.1.0.312
CVE-2017-9302	5.5	2%	May 29	RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file Affected: 16.0.2.32
CVE-2016-9018	5.5	8%	Oct 28	Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a… Affected: 18.1.5.705
CVE-2014-3113	–	5%	Jul 7	Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2) stsz atom in an MP4 file Affected: through 17.0.8.22; 17.0.4.60
CVE-2014-3444	–	6%	May 20	The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write… Affected: through 16.0.3.51; 16.0.0; 16.0.0.282; 16.0.1.18; 16.0.2.32
CVE-2013-7260	–	67%	Jan 3	Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary… Affected: through 17.0.4.60; 2.1.2; 2.1.3; 2.1.4; 4; 5; +34 more
CVE-2013-6877	–	11%	Dec 19	Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to execute arbitrary code via a… Affected: 16.0.2.32; 16.0.3.51
CVE-2013-4974	–	4%	Aug 27	RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… Affected: through 16.0.2.32; 10.0; 10.5; 11.0; 11.0.1; 11.0.2; +26 more
CVE-2013-4973	–	6%	Aug 27	Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp… Affected: through 16.0.2.32; 10.0; 10.5; 11.0; 11.0.1; 11.0.2; +26 more
CVE-2013-3299	–	2%	Jul 6	RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing… Affected: through 16.0.2.32; 4; 5; 6; 7; 8; +33 more
CVE-2013-1750	–	3%	Mar 20	Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4… Affected: through 16.0.0.282; 4; 5; 6; 7; 8; +32 more
CVE-2012-5691	–	53%	Dec 19	Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file Affected: through 16.0.0; 4; 5; 6; 7; 8; +28 more
CVE-2012-5690	–	3%	Dec 19	RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an… Affected: through 16.0.0; 4; 5; 6; 7; 8; +28 more
CVE-2012-4987	–	3%	Nov 4	Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect… Affected: 15.0.5.109
CVE-2012-3234	–	1%	Sep 12	RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which… Affected: through 15.0.5.109; 2.1.2; 2.1.3; 2.1.4; 4; 5; +28 more
CVE-2012-2410	–	2%	Sep 12	Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: through 15.0.5.109; 2.1.2; 2.1.3; 2.1.4; 4; 5; +28 more
CVE-2012-2409	–	2%	Sep 12	Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: through 15.0.5.109; 2.1.2; 2.1.3; 2.1.4; 4; 5; +28 more
CVE-2012-2408	–	2%	Sep 12	The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: through 15.0.5.109; 2.1.2; 2.1.3; 2.1.4; 4; 5; +28 more
CVE-2012-2407	–	2%	Sep 12	Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… Affected: through 15.0.5.109; 2.1.2; 2.1.3; 2.1.4; 4; 5; +28 more
CVE-2012-2411	–	5%	May 18	Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media… Affected: through 15.0.4; 4; 5; 6; 7; 8; +25 more
CVE-2012-2406	–	5%	May 18	RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to… Affected: through 15.0.4; 4; 5; 6; 7; 8; +25 more
CVE-2012-1904	–	5%	Mar 28	mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to… Affected: through 15.0.0; 4; 5; 6; 7; 8; +22 more
CVE-2012-0928	–	4%	Feb 8	The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2012-0927	–	4%	Feb 8	Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2012-0926	–	4%	Feb 8	The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2012-0925	–	4%	Feb 8	Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2012-0924	–	4%	Feb 8	RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2012-0923	–	4%	Feb 8	The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2012-0922	–	4%	Feb 8	rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted… Affected: 14.0.0; 14.0.1; 14.0.1.609; 14.0.1.633; 14.0.2; 14.0.3; +17 more
CVE-2011-4262	–	4%	Nov 24	Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4261	–	3%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an… Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4260	–	3%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4259	–	3%	Nov 24	Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4258	–	4%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4257	–	3%	Nov 24	The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4256	–	4%	Nov 24	The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to… Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more
CVE-2011-4255	–	4%	Nov 24	Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec… Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more
CVE-2011-4254	–	3%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4253	–	4%	Nov 24	Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via… Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more
CVE-2011-4252	–	4%	Nov 24	The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more
CVE-2011-4251	–	3%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4250	–	4%	Nov 24	Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via… Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more
CVE-2011-4249	–	3%	Nov 24	Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4248	–	4%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4247	–	3%	Nov 24	RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream Affected: through 14.0.7; 4; 5; 6; 7; 8; +24 more
CVE-2011-4246	–	4%	Nov 24	The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more
CVE-2011-4245	–	4%	Nov 24	The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of… Affected: through 12.0.0.1701; 7.0; 8.0; 10.0; 10.0.0.305; 10.0.0.331; +32 more