RE
Vendor
Realnetworks
26 products with CVEs on record
397
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-32291
RE
Realplayer
Realnetworks
8.8
2%
Jun 5In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file
CVE-2022-32271
RE
Realplayer
Realnetworks
9.6
3%
Jun 3In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability
CVE-2022-32270
RE
Realplayer
Realnetworks
9.8
5%
Jun 3In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution
CVE-2022-32269
RE
Realplayer
Realnetworks
9.8
4%
Jun 3In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core)
CVE-2018-13121
RP
Realone Player
Realnetworks
5.5
1%
Jul 3RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a crafted .aiff file
CVE-2017-9302
RE
Realplayer
Realnetworks
5.5
2%
May 29RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file
CVE-2016-9018
RE
Realplayer
Realnetworks
5.5
8%
Oct 28Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a…
CVE-2013-2604
RI
Realarcade Installer
Realnetworks
–
1%
Jan 12RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory…
CVE-2013-2603
RI
Realarcade Installer
Realnetworks
–
4%
Jan 12The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid…
CVE-2014-3113
RE
Realplayer
Realnetworks
–
5%
Jul 7Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2) stsz atom in an MP4 file
CVE-2014-3444
RE
Realplayer
Realnetworks
–
6%
May 20The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write…
CVE-2013-7260
RE
Realplayer
Realnetworks
–
67%
Jan 3Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary…
CVE-2013-6877
RE
Realplayer
Realnetworks
–
11%
Dec 19Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to execute arbitrary code via a…
CVE-2013-4974
RE
Realplayer
Realnetworks
–
4%
Aug 27RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…
CVE-2013-4973
RE
Realplayer
Realnetworks
–
6%
Aug 27Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp…
CVE-2013-3299
RE
Realplayer
Realnetworks
–
2%
Jul 6RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing…
CVE-2013-1750
RS
Realplayer SP
Realnetworks
–
3%
Mar 20Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4…
CVE-2012-5691
RE
Realplayer
Realnetworks
–
53%
Dec 19Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file
CVE-2012-5690
RE
Realplayer
Realnetworks
–
3%
Dec 19RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an…
CVE-2012-4987
RE
Realplayer
Realnetworks
–
3%
Nov 4Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect…
CVE-2012-3234
RS
Realplayer SP
Realnetworks
–
1%
Sep 12RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which…
CVE-2012-2410
RE
Realplayer
Realnetworks
–
2%
Sep 12Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of…
CVE-2012-2409
RS
Realplayer SP
Realnetworks
–
2%
Sep 12Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of…
CVE-2012-2408
RE
Realplayer
Realnetworks
–
2%
Sep 12The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of…
CVE-2012-2407
RS
Realplayer SP
Realnetworks
–
2%
Sep 12Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of…
CVE-2010-5228
RS
Realplayer SP
Realnetworks
–
4%
Sep 7Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as…
CVE-2012-2411
RE
Realplayer
Realnetworks
–
5%
May 18Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media…
CVE-2012-2406
RE
Realplayer
Realnetworks
–
5%
May 18RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to…
CVE-2012-2268
HM
Helix Mobile Server
Realnetworks
–
2%
Apr 17master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled…
CVE-2012-2267
HS
Helix Server
Realnetworks
–
2%
Apr 17master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by…
CVE-2012-1985
HS
Helix Server
Realnetworks
–
1%
Apr 17Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of…
CVE-2012-1984
HS
Helix Server
Realnetworks
–
2%
Apr 17Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script…
CVE-2012-1923
HS
Helix Server
Realnetworks
–
38%
Apr 17RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information…
CVE-2012-0942
HM
Helix Mobile Server
Realnetworks
–
4%
Apr 17Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication…
CVE-2012-1904
RS
Realplayer SP
Realnetworks
–
5%
Mar 28mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to…
CVE-2012-0928
RE
Realplayer
Realnetworks
–
4%
Feb 8The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode…
CVE-2012-0927
RS
Realplayer SP
Realnetworks
–
4%
Feb 8Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code…
CVE-2012-0926
RE
Realplayer
Realnetworks
–
4%
Feb 8The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows…
CVE-2012-0925
RS
Realplayer SP
Realnetworks
–
4%
Feb 8Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to…
CVE-2012-0924
RE
Realplayer
Realnetworks
–
4%
Feb 8RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a…
CVE-2012-0923
RS
Realplayer SP
Realnetworks
–
4%
Feb 8The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows…
CVE-2012-0922
RS
Realplayer SP
Realnetworks
–
4%
Feb 8rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted…
CVE-2011-4262
RE
Realplayer
Realnetworks
–
4%
Nov 24Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file
CVE-2011-4261
RE
Realplayer
Realnetworks
–
3%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an…
CVE-2011-4260
RE
Realplayer
Realnetworks
–
3%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file
CVE-2011-4259
RE
Realplayer
Realnetworks
–
3%
Nov 24Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file
CVE-2011-4258
RE
Realplayer
Realnetworks
–
4%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file
CVE-2011-4257
RE
Realplayer
Realnetworks
–
3%
Nov 24The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data
CVE-2011-4256
RE
Realplayer
Realnetworks
–
4%
Nov 24The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to…
CVE-2011-4255
RE
Realplayer
Realnetworks
–
4%
Nov 24Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec…
CVE-2011-4254
RE
Realplayer
Realnetworks
–
3%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request
CVE-2011-4253
RE
Realplayer
Realnetworks
–
4%
Nov 24Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via…
CVE-2011-4252
RE
Realplayer
Realnetworks
–
4%
Nov 24The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height
CVE-2011-4251
RE
Realplayer
Realnetworks
–
3%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file
CVE-2011-4250
RE
Realplayer
Realnetworks
–
4%
Nov 24Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via…
CVE-2011-4249
RE
Realplayer
Realnetworks
–
3%
Nov 24Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors
CVE-2011-4248
RE
Realplayer
Realnetworks
–
4%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file
CVE-2011-4247
RE
Realplayer
Realnetworks
–
3%
Nov 24RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream
CVE-2011-4246
RE
Realplayer
Realnetworks
–
4%
Nov 24The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2011-4245
RE
Realplayer
Realnetworks
–
4%
Nov 24The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of…