The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
References
Link | Resource |
---|---|
http://service.real.com/realplayer/security/11182011_player/en/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2011-11-24 11:55
Updated : 2024-02-04 17:54
NVD link : CVE-2011-4256
Mitre link : CVE-2011-4256
CVE.ORG link : CVE-2011-4256
JSON object : View
Products Affected
realnetworks
- realplayer
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')