Description
The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/47896
Vendor Advisory x_refsource_confirm
http://service.real.com/realplayer/security/02062012_player/en/
Scores
EPSS
0.0214
EPSS Percentile
84.4%
Details
CWE
CWE-94
Status
published
Products (33)
realnetworks/realplayer
14.0.0
realnetworks/realplayer
14.0.1
realnetworks/realplayer
14.0.1.609
realnetworks/realplayer
14.0.1.633
realnetworks/realplayer
14.0.2
realnetworks/realplayer
14.0.3
realnetworks/realplayer
14.0.4
realnetworks/realplayer
14.0.5
realnetworks/realplayer
14.0.6
realnetworks/realplayer
14.0.7
... and 23 more
Published
Feb 08, 2012
Tracked Since
Feb 18, 2026