The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.
References
Link | Resource |
---|---|
http://service.real.com/realplayer/security/11182011_player/en/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2011-11-24 03:55
Updated : 2012-03-07 21:00
NVD link : CVE-2011-4256
Mitre link : CVE-2011-4256
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
realnetworks
- realplayer