CVE-2011-2949
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD
Description
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.
Affected (23)
Products: Realnetworks: Realplayer, Realplayer Sp
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.0.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.0.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.0 |
References (6)
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.