RE
Vendor
Realnetworks
397
CVEs
0
On KEV
0
New 30D
Products
RE9.8
Realplayer
Realnetworks
170 CVEs0 on KEV0 new
RS–
Realplayer SP
Realnetworks
82 CVEs0 on KEV0 new
RP5.5
Realone Player
Realnetworks
35 CVEs0 on KEV0 new
HP–
Helix Player
Realnetworks
20 CVEs0 on KEV0 new
HS–
Helix Server
Realnetworks
15 CVEs0 on KEV0 new
RE–
Realplayer Enterprise
Realnetworks
14 CVEs0 on KEV0 new
HM–
Helix Mobile Server
Realnetworks
11 CVEs0 on KEV0 new
RE–
Realserver
Realnetworks
8 CVEs0 on KEV0 new
HS–
Helix Server Mobile
Realnetworks
6 CVEs0 on KEV0 new
RE–
Realone Enterprise Desktop
Realnetworks
6 CVEs0 on KEV0 new
HU7.5
Helix Universal Server
Realnetworks
5 CVEs0 on KEV0 new
HD–
Helix Dna Server
Realnetworks
4 CVEs0 on KEV0 new
RD–
Realone Desktop Manager
Realnetworks
3 CVEs0 on KEV0 new
RI–
Realarcade Installer
Realnetworks
2 CVEs0 on KEV0 new
R2–
Realjukebox 2
Realnetworks
2 CVEs0 on KEV0 new
R2–
Realjukebox 2 Plus
Realnetworks
2 CVEs0 on KEV0 new
RG–
Realserver G2
Realnetworks
2 CVEs0 on KEV0 new
RH–
Rhapsody
Realnetworks
2 CVEs0 on KEV0 new
GA–
Gamehouse
Realnetworks
1 CVEs0 on KEV0 new
HU–
Helix Universal Mobile Server
Realnetworks
1 CVEs0 on KEV0 new
HU–
Helix Universal Mobile Server And Gateway
Realnetworks
1 CVEs0 on KEV0 new
RE–
Realarcade
Realnetworks
1 CVEs0 on KEV0 new
RI–
Realplayer Intranet
Realnetworks
1 CVEs0 on KEV0 new
RG–
Realsystem G2 Server
Realnetworks
1 CVEs0 on KEV0 new
RP–
Realsystem Proxy
Realnetworks
1 CVEs0 on KEV0 new
RS–
Realsystem Server
Realnetworks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-32291 | RE Realplayer Realnetworks | 8.8 | Jun 5 | In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file |
| CVE-2022-32271 | RE Realplayer Realnetworks | 9.6 | Jun 3 | In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability |
| CVE-2022-32270 | RE Realplayer Realnetworks | 9.8 | Jun 3 | In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution |
| CVE-2022-32269 | RE Realplayer Realnetworks | 9.8 | Jun 3 | In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core) |
| CVE-2018-13121 | RP Realone Player Realnetworks | 5.5 | Jul 3 | RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a crafted .aiff file |
| CVE-2017-9302 | RE Realplayer Realnetworks | 5.5 | May 29 | RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file |
| CVE-2016-9018 | RE Realplayer Realnetworks | 5.5 | Oct 28 | Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a… |
| CVE-2013-2604 | RI Realarcade Installer Realnetworks | – | Jan 12 | RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory… |
| CVE-2013-2603 | RI Realarcade Installer Realnetworks | – | Jan 12 | The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid… |
| CVE-2014-3113 | RE Realplayer Realnetworks | – | Jul 7 | Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2) stsz atom in an MP4 file |
| CVE-2014-3444 | RE Realplayer Realnetworks | – | May 20 | The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write… |
| CVE-2013-7260 | RE Realplayer Realnetworks | – | Jan 3 | Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary… |
| CVE-2013-6877 | RE Realplayer Realnetworks | – | Dec 19 | Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to execute arbitrary code via a… |
| CVE-2013-4974 | RE Realplayer Realnetworks | – | Aug 27 | RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… |
| CVE-2013-4973 | RE Realplayer Realnetworks | – | Aug 27 | Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp… |
| CVE-2013-3299 | RE Realplayer Realnetworks | – | Jul 6 | RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing… |
| CVE-2013-1750 | RS Realplayer SP Realnetworks | – | Mar 20 | Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4… |
| CVE-2012-5691 | RE Realplayer Realnetworks | – | Dec 19 | Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file |
| CVE-2012-5690 | RE Realplayer Realnetworks | – | Dec 19 | RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an… |
| CVE-2012-4987 | RE Realplayer Realnetworks | – | Nov 4 | Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect… |
| CVE-2012-3234 | RS Realplayer SP Realnetworks | – | Sep 12 | RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which… |
| CVE-2012-2410 | RE Realplayer Realnetworks | – | Sep 12 | Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… |
| CVE-2012-2409 | RS Realplayer SP Realnetworks | – | Sep 12 | Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… |
| CVE-2012-2408 | RE Realplayer Realnetworks | – | Sep 12 | The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… |
| CVE-2012-2407 | RS Realplayer SP Realnetworks | – | Sep 12 | Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of… |
| CVE-2010-5228 | RS Realplayer SP Realnetworks | – | Sep 7 | Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as… |
| CVE-2012-2411 | RE Realplayer Realnetworks | – | May 18 | Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media… |
| CVE-2012-2406 | RE Realplayer Realnetworks | – | May 18 | RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to… |
| CVE-2012-2268 | HM Helix Mobile Server Realnetworks | – | Apr 17 | master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled… |
| CVE-2012-2267 | HS Helix Server Realnetworks | – | Apr 17 | master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by… |
| CVE-2012-1985 | HS Helix Server Realnetworks | – | Apr 17 | Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of… |
| CVE-2012-1984 | HS Helix Server Realnetworks | – | Apr 17 | Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script… |
| CVE-2012-1923 | HS Helix Server Realnetworks | – | Apr 17 | RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information… |
| CVE-2012-0942 | HM Helix Mobile Server Realnetworks | – | Apr 17 | Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication… |
| CVE-2012-1904 | RS Realplayer SP Realnetworks | – | Mar 28 | mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to… |
| CVE-2012-0928 | RE Realplayer Realnetworks | – | Feb 8 | The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode… |
| CVE-2012-0927 | RS Realplayer SP Realnetworks | – | Feb 8 | Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code… |
| CVE-2012-0926 | RE Realplayer Realnetworks | – | Feb 8 | The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows… |
| CVE-2012-0925 | RS Realplayer SP Realnetworks | – | Feb 8 | Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to… |
| CVE-2012-0924 | RE Realplayer Realnetworks | – | Feb 8 | RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a… |
| CVE-2012-0923 | RS Realplayer SP Realnetworks | – | Feb 8 | The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows… |
| CVE-2012-0922 | RS Realplayer SP Realnetworks | – | Feb 8 | rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted… |
| CVE-2011-4262 | RE Realplayer Realnetworks | – | Nov 24 | Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file |
| CVE-2011-4261 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an… |
| CVE-2011-4260 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file |
| CVE-2011-4259 | RE Realplayer Realnetworks | – | Nov 24 | Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file |
| CVE-2011-4258 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file |
| CVE-2011-4257 | RE Realplayer Realnetworks | – | Nov 24 | The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data |
| CVE-2011-4256 | RE Realplayer Realnetworks | – | Nov 24 | The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to… |
| CVE-2011-4255 | RE Realplayer Realnetworks | – | Nov 24 | Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec… |
| CVE-2011-4254 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request |
| CVE-2011-4253 | RE Realplayer Realnetworks | – | Nov 24 | Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via… |
| CVE-2011-4252 | RE Realplayer Realnetworks | – | Nov 24 | The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height |
| CVE-2011-4251 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file |
| CVE-2011-4250 | RE Realplayer Realnetworks | – | Nov 24 | Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via… |
| CVE-2011-4249 | RE Realplayer Realnetworks | – | Nov 24 | Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors |
| CVE-2011-4248 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file |
| CVE-2011-4247 | RE Realplayer Realnetworks | – | Nov 24 | RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream |
| CVE-2011-4246 | RE Realplayer Realnetworks | – | Nov 24 | The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory… |
| CVE-2011-4245 | RE Realplayer Realnetworks | – | Nov 24 | The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of… |
