RE
Product
Realplayer
170
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 2Low 0
Watch
Add Realplayer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-2578 | – | Oct 19 | Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an… Affected: 11.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +2 more |
| CVE-2010-3002 | – | Aug 30 | Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors Affected: 11.0; 11.1 |
| CVE-2010-3001 | – | Aug 30 | Unspecified vulnerability in an ActiveX control in the Internet Explorer (IE) plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows… Affected: 11.0; 11.1 |
| CVE-2010-3000 | – | Aug 30 | Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to… Affected: 11.0; 11.1 |
| CVE-2010-2996 | – | Aug 30 | Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file Affected: 11.0; 11.1 |
| CVE-2010-0120 | – | Aug 30 | Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large… Affected: 11.0; 11.1 |
| CVE-2010-0117 | – | Aug 30 | RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote… Affected: 11.0; 11.1 |
| CVE-2010-0116 | – | Aug 30 | Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted… Affected: 11.0; 11.1 |
| CVE-2010-0417 | – | Feb 18 | Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute… Affected: All versions, or not specified |
| CVE-2010-0416 | – | Feb 18 | Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to… Affected: All versions, or not specified |
| CVE-2009-4257 | – | Jan 25 | Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4248 | – | Jan 25 | Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4247 | – | Jan 25 | Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4246 | – | Jan 25 | Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4245 | – | Jan 25 | Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4244 | – | Jan 25 | Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4243 | – | Jan 25 | RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4242 | – | Jan 25 | Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-4241 | – | Jan 25 | Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac… Affected: 10.0; 10.5; 11.0; 11.0.1; 11.0.2; 11.0.3; +9 more |
| CVE-2009-0376 | – | Feb 8 | Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer… Affected: 11 |
| CVE-2009-0375 | – | Feb 8 | Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac… Affected: 11 |
| CVE-2008-3064 | – | Jul 28 | Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably… Affected: 10.0; 10.5 |
| CVE-2008-3066 | – | Jul 28 | Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows… Affected: 10.0; 10.5 |
| CVE-2007-5400 | – | Jul 28 | Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via… Affected: 10.0; 10.5 |
| CVE-2008-1309 | – | Mar 12 | The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11… Affected: 10.0; 10.5; 11 |
| CVE-2008-0098 | – | Jan 8 | Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors Affected: 11_build_6.0.14.748 |
| CVE-2007-6235 | – | Dec 4 | A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a… Affected: 11 |
| CVE-2007-6224 | – | Dec 4 | The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service (browser crash)… Affected: 11.0 |
| CVE-2007-2264 | – | Oct 31 | Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute… Affected: 8.0; 10.0; 10.0; 10.0; 10.0; 10.0; +11 more |
| CVE-2007-5081 | – | Oct 31 | Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute… Affected: 8.0; 10.0; 10.0; 10.0; 10.0; 10.0; +10 more |
| CVE-2007-5080 | – | Oct 31 | Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted… Affected: 10.0; 10.5; 10.5; 10.5; 10.5 |
| CVE-2007-4599 | – | Oct 31 | Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a… Affected: 10.0; 10.5; 10.5; 10.5; 10.5 |
| CVE-2007-2263 | – | Oct 31 | Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code… Affected: 10.0; 10.0; 10.0; 10.0; 10.0; 10.0; +9 more |
| CVE-2007-5601 | – | Oct 20 | Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne… Affected: 10.0; 10.5; 11_beta |
| CVE-2007-4904 | – | Sep 17 | RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a… Affected: 10.0.8; 10.0.9; 10.1; 10.5-gold |
| CVE-2007-3410 | – | Jun 26 | Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer… Affected: 10.0; 10.1; 10.5 |
| CVE-2007-2497 | – | May 4 | RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain .ra file Affected: through 10.0 |
| CVE-2006-6847 | – | Dec 31 | An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the… Affected: 10.5; 10.5_6.0.12.1016_beta; 10.5_6.0.12.1040; 10.5_6.0.12.1053; 10.5_6.0.12.1056; 10.5_6.0.12.1059; +2 more |
| CVE-2006-6759 | – | Dec 27 | A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer crash) by invoking the… Affected: 10.5 |
| CVE-2006-1370 | – | Mar 23 | Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise… Affected: 8.0; 10.0; 10.5_6.0.12.1040; 10.5_6.0.12.1053; 10.5_6.0.12.1056; 10.5_6.0.12.1059; +3 more |
| CVE-2006-0323 | – | Mar 23 | Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to… Affected: 10.0; 10.0.6; 10.5 |
| CVE-2005-2922 | – | Dec 31 | Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote… Affected: 8.0; 10.0; 10.0.0.305; 10.0.0.331; 10.0.1; 10.0.2; +11 more |
| CVE-2005-4126 | – | Dec 9 | ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208 Affected: 6.0; 7.0; 8.0; 10.0; 10.0_6.0.12.690; 10.0_beta; +8 more |
| CVE-2005-4130 | – | Dec 9 | ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208 Affected: All versions, or not specified |
| CVE-2005-3677 | – | Nov 18 | Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin (RJS) file Affected: 10.0; 10.5_6.0.12.1040; 10.5_6.0.12.1053; 10.5_6.0.12.1056; 10.5_6.0.12.1059; 10.5_6.0.12.1069; +1 more |
| CVE-2005-2629 | – | Nov 18 | Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie… Affected: 8.0; 10.0; 10.0; 10.0; 10.5; 10.5_6.0.12.1040; +5 more |
| CVE-2005-2630 | – | Nov 18 | Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer… Affected: 8.0; 10.0; 10.0; 10.0; 10.5; 10.5_6.0.12.1040; +5 more |
| CVE-2005-2936 | – | Nov 18 | Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8… Affected: 8.0; 10.0; 10.5_6.0.12.1040; 10.5_6.0.12.1348 |
| CVE-2005-2710 | – | Sep 27 | Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a… Affected: 10.0 |
| CVE-2005-2054 | – | Jun 29 | Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX… Affected: 10.0; 10.5_6.0.12.1040_1069 |