Vulnerability index

Browse CVEs

196 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Realplayer HIGH 8.8
CVE-2022-32291

In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file.

Fix: after 20.1.0.312
Fix from $1,950 2022-06-05
Realplayer CRITICAL 9.8
CVE-2022-32269

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core)…

No fix yet
Fix from $2,300 2022-06-03
Realplayer CRITICAL 9.8
CVE-2022-32270

In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code …

No fix yet
Fix from $2,300 2022-06-03
Realplayer CRITICAL 9.6
CVE-2022-32271

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player …

No fix yet
Fix from $2,300 2022-06-03
Realone Player MEDIUM 5.5
CVE-2018-13121

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a cra…

No fix yet
Fix from $1,600 2018-07-03
Realplayer MEDIUM 5.5
CVE-2017-9302

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file.

Mitigation only
Fix from $1,600 2017-05-29
Realplayer MEDIUM 5.5
CVE-2016-9018EPSS 8%

Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlay…

No fix yet
Fix from $1,600 2016-10-28
Realarcade Installer HIGH 7.2
CVE-2013-2604

RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for t…

Mitigation only
Fix from $1,950 2015-01-12
Realarcade Installer HIGH 10.0
CVE-2013-2603

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type co…

Mitigation only
Fix from $1,950 2015-01-12
Realplayer HIGH 9.3
CVE-2014-3113EPSS 5%

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2…

Fix: after 17.0.8.22
Fix from $1,950 2014-07-07
Realplayer HIGH 9.3
CVE-2014-3444EPSS 6%

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a…

Fix: after 16.0.3.51
Fix from $1,950 2014-05-20
Realplayer HIGH 7.5
CVE-2013-7260EPSS 67%

Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote att…

Fix: after 17.0.4.60
Fix from $1,950 2014-01-03
Realplayer HIGH 9.3
CVE-2013-6877EPSS 11%

Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to …

No fix yet
Fix from $1,950 2013-12-19
Realplayer HIGH 9.3
CVE-2013-4973EPSS 6%

Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbi…

Fix: after 16.0.2.32
Fix from $1,950 2013-08-27
Realplayer HIGH 9.3
CVE-2013-4974

RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of…

Fix: after 16.0.2.32
Fix from $1,950 2013-08-27
Realplayer HIGH 9.3
CVE-2013-1750

Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitra…

Fix: after 16.0.0.282
Fix from $1,950 2013-03-20
Realplayer HIGH 9.3
CVE-2012-5690

RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file t…

Fix: after 16.0.0
Fix from $1,950 2012-12-19
Realplayer HIGH 9.3
CVE-2012-5691EPSS 53%

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code vi…

Fix: after 16.0.0
Fix from $1,950 2012-12-19
Realplayer MEDIUM 6.8
CVE-2012-4987

Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP f…

Mitigation only
Fix from $1,600 2012-11-04
Realplayer HIGH 7.5
CVE-2012-2407

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote att…

Fix: after 15.0.5.109
Fix from $1,950 2012-09-12
Realplayer HIGH 7.5
CVE-2012-2409

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote att…

Fix: after 15.0.5.109
Fix from $1,950 2012-09-12
Realplayer HIGH 7.5
CVE-2012-3234

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame s…

Fix: after 15.0.5.109
Fix from $1,950 2012-09-12
Realplayer MEDIUM 6.8
CVE-2012-2408

The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attacke…

Fix: after 15.0.5.109
Fix from $1,600 2012-09-12
Realplayer MEDIUM 6.8
CVE-2012-2410

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote att…

Fix: after 15.0.5.109
Fix from $1,600 2012-09-12
Realplayer Sp MEDIUM 6.9
CVE-2010-5228

Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the…

Mitigation only
Fix from $1,600 2012-09-07
Realplayer HIGH 9.3
CVE-2012-2406

RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which all…

Fix: after 15.0.4
Fix from $1,950 2012-05-18
Realplayer HIGH 9.3
CVE-2012-2411EPSS 5%

Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code v…

Fix: after 15.0.4
Fix from $1,950 2012-05-18
Helix Server MEDIUM 6.8
CVE-2012-1985

Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hi…

Mitigation only
Fix from $1,600 2012-04-17
Helix Server MEDIUM 5.0
CVE-2012-2267

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial…

Mitigation only
Fix from $1,600 2012-04-17
Helix Server MEDIUM 5.0
CVE-2012-2268

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial…

Mitigation only
Fix from $1,600 2012-04-17