9.3
CVSSv2

CVE-2011-2954

Published: 18/08/2011 Updated: 06/10/2011
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 up to and including 11.1 and 14.0.0 up to and including 14.0.5 and RealPlayer SP 1.0 up to and including 1.1.5, when an Embedded RealPlayer is used, allows remote malicious users to execute arbitrary code via unspecified vectors.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

realnetworks realplayer 11.0

realnetworks realplayer 11.1

realnetworks realplayer 14.0.3

realnetworks realplayer 14.0.4

realnetworks realplayer 14.0.5

realnetworks realplayer 14.0.1

realnetworks realplayer 14.0.2

realnetworks realplayer 14.0.0

realnetworks realplayer sp 1.1.1

realnetworks realplayer sp 1.0.5

realnetworks realplayer sp 1.1.3

realnetworks realplayer sp 1.1.2

realnetworks realplayer sp 1.0.0

realnetworks realplayer sp 1.0.1

realnetworks realplayer sp 1.1

realnetworks realplayer sp 1.1.5

realnetworks realplayer sp 1.0.2

realnetworks realplayer sp 1.1.4