CVE-2011-2945

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2011-08-18

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Realplayer (Realnetworks)
• Realplayer Sp (Realnetworks)

References

• http://service.real.com/realplayer/security/08162011_player/en/
• http://www.securitytracker.com/id?1025943