Browse CVEs

HIGH 8.8 CVE-2022-32291 In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file. Realplayer after 20.1.0.312 Fix from $1,9502022-06-05 CRITICAL 9.8 CVE-2022-32269 In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core)… Realplayer No fix yet Fix from $2,3002022-06-03 CRITICAL 9.8 CVE-2022-32270 In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code … Realplayer No fix yet Fix from $2,3002022-06-03 CRITICAL 9.6 CVE-2022-32271 In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player … Realplayer No fix yet Fix from $2,3002022-06-03 MEDIUM 5.5 CVE-2018-13121 RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a cra… Realone Player No fix yet Fix from $1,6002018-07-03 MEDIUM 5.5 CVE-2017-9302 RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file. Realplayer Mitigation only Fix from $1,6002017-05-29 MEDIUM 5.5 CVE-2016-9018EPSS 8% Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlay… Realplayer No fix yet Fix from $1,6002016-10-28 HIGH 7.2 CVE-2013-2604 RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for t… Realarcade Installer Mitigation only Fix from $1,9502015-01-12 HIGH 10.0 CVE-2013-2603 The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type co… Realarcade Installer Mitigation only Fix from $1,9502015-01-12 HIGH 9.3 CVE-2014-3113EPSS 5% Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2… Realplayer after 17.0.8.22 Fix from $1,9502014-07-07 HIGH 9.3 CVE-2014-3444EPSS 6% The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a… Realplayer after 16.0.3.51 Fix from $1,9502014-05-20 HIGH 7.5 CVE-2013-7260EPSS 67% Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote att… Realplayer after 17.0.4.60 Fix from $1,9502014-01-03 HIGH 9.3 CVE-2013-6877EPSS 11% Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to … Realplayer No fix yet Fix from $1,9502013-12-19 HIGH 9.3 CVE-2013-4973EPSS 6% Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbi… Realplayer after 16.0.2.32 Fix from $1,9502013-08-27 HIGH 9.3 CVE-2013-4974 RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of… Realplayer after 16.0.2.32 Fix from $1,9502013-08-27 HIGH 9.3 CVE-2013-1750 Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitra… Realplayer after 16.0.0.282 Fix from $1,9502013-03-20 HIGH 9.3 CVE-2012-5690 RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file t… Realplayer after 16.0.0 Fix from $1,9502012-12-19 HIGH 9.3 CVE-2012-5691EPSS 53% Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code vi… Realplayer after 16.0.0 Fix from $1,9502012-12-19 MEDIUM 6.8 CVE-2012-4987 Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP f… Realplayer Mitigation only Fix from $1,6002012-11-04 HIGH 7.5 CVE-2012-2407 Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote att… Realplayer after 15.0.5.109 Fix from $1,9502012-09-12 HIGH 7.5 CVE-2012-2409 Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote att… Realplayer after 15.0.5.109 Fix from $1,9502012-09-12 HIGH 7.5 CVE-2012-3234 RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame s… Realplayer after 15.0.5.109 Fix from $1,9502012-09-12 MEDIUM 6.8 CVE-2012-2408 The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attacke… Realplayer after 15.0.5.109 Fix from $1,6002012-09-12 MEDIUM 6.8 CVE-2012-2410 Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote att… Realplayer after 15.0.5.109 Fix from $1,6002012-09-12 MEDIUM 6.9 CVE-2010-5228 Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the… Realplayer Sp Mitigation only Fix from $1,6002012-09-07 HIGH 9.3 CVE-2012-2406 RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which all… Realplayer after 15.0.4 Fix from $1,9502012-05-18 HIGH 9.3 CVE-2012-2411EPSS 5% Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code v… Realplayer after 15.0.4 Fix from $1,9502012-05-18 MEDIUM 6.8 CVE-2012-1985 Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hi… Helix Server Mitigation only Fix from $1,6002012-04-17 MEDIUM 5.0 CVE-2012-2267 master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial… Helix Server Mitigation only Fix from $1,6002012-04-17 MEDIUM 5.0 CVE-2012-2268 master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial… Helix Server Mitigation only Fix from $1,6002012-04-17