realnetworks realplayer 15.0.1.13 vulnerabilities and exploits

(subscribe to this query)

RealNetworks RealPlayer 16.0.2.32 and previous versions allows remote malicious users to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.

1 EDB exploit

rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x prior to 15.02.71, and RealPlayer SP 1.0 up to and including 1.1.5, allows remote malicious users to execute arbitrary code via crafted flags in an RMFF file.

The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x prior to 15.02.71, and RealPlayer SP 1.0 up to and including 1.1.5, does not properly handle the frame size array, which allows remote malicious users to execute arbitrary code via a crafted RV20 RealVideo video strea...

Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x prior to 15.02.71, and RealPlayer SP 1.0 up to and including 1.1.5, allows remote malicious users to execute arbitrary code via a crafted RV40 RealVideo video stream.

RealNetworks RealPlayer 11.x, 14.x, and 15.x prior to 15.02.71, and RealPlayer SP 1.0 up to and including 1.1.5, allows remote malicious users to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.

The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x prior to 15.02.71, and RealPlayer SP 1.0 up to and including 1.1.5, does not properly handle height and width values, which allows remote malicious users to execute arbitrary code via a crafted RV10 RealVideo video st...

Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x prior to 15.02.71, and RealPlayer SP 1.0 up to and including 1.1.5, allows remote malicious users to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream.

RealNetworks RealPlayer prior to 15.0.4.53, and RealPlayer SP 1.0 up to and including 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote malicious users to execute arbitrary code via a crafted file.

Buffer overflow in RealNetworks RealPlayer prior to 15.0.4.53, and RealPlayer SP 1.0 up to and including 1.1.5, allows remote malicious users to execute arbitrary code via a crafted RealJukebox Media file.

Heap-based buffer overflow in RealNetworks RealPlayer prior to 16.0.1.18 and RealPlayer SP 1.0 up to and including 1.1.5 allows remote malicious users to execute arbitrary code via a malformed MP4 file.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook