realnetworks Vulnerability Advisory Catalog

Total 211 security vulnerabilities recorded for realnetworks software and firmware.

← Back to All Vendors
Component: realplayer

In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file....

📅 2022-06-05
CVSS 8.8 Dossier →
CVE-2022-32271 CRITICAL
Component: realplayer

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player t...

📅 2022-06-03
CVSS 9.6 Dossier →
CVE-2022-32270 CRITICAL
Component: realplayer

In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code E...

📅 2022-06-03
CVSS 9.8 Dossier →
CVE-2022-32269 CRITICAL
Component: realplayer

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core)....

📅 2022-06-03
CVSS 9.8 Dossier →
Component: realone_player

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a craf...

📅 2018-07-03
CVSS 5.5 Dossier →
CVE-2017-9302 MEDIUM
Component: realplayer

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file....

📅 2017-05-29
CVSS 5.5 Dossier →
CVE-2016-9018 MEDIUM
Component: realplayer

Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlaye...

📅 2016-10-28
CVSS 5.5 Dossier →
CVE-2013-2604 UNKNOWN
Component: realarcade_installer

RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for th...

📅 2015-01-12
CVSS 7.2 Dossier →
CVE-2013-2603 UNKNOWN
Component: realarcade_installer

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type con...

📅 2015-01-12
CVSS 10.0 Dossier →
CVE-2014-3113 UNKNOWN
Component: realplayer

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2)...

📅 2014-07-07
CVSS 9.3 Dossier →
CVE-2014-3444 UNKNOWN
Component: realplayer

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a ...

📅 2014-05-20
CVSS 9.3 Dossier →
CVE-2013-7260 UNKNOWN
Component: realplayer

Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote atta...

📅 2014-01-03
CVSS 7.5 Dossier →
CVE-2013-6877 UNKNOWN
Component: realplayer

Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to e...

📅 2013-12-19
CVSS 9.3 Dossier →
CVE-2013-4974 UNKNOWN
Component: realplayer

RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of ...

📅 2013-08-27
CVSS 9.3 Dossier →
CVE-2013-4973 UNKNOWN
Component: realplayer

Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbit...

📅 2013-08-27
CVSS 9.3 Dossier →
CVE-2013-3299 UNKNOWN
Component: realplayer

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an ...

📅 2013-07-06
CVSS 4.3 Dossier →
CVE-2013-1750 UNKNOWN
Component: realplayer

Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrar...

📅 2013-03-20
CVSS 9.3 Dossier →
CVE-2012-5691 UNKNOWN
Component: realplayer

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via...

📅 2012-12-19
CVSS 9.3 Dossier →
CVE-2012-5690 UNKNOWN
Component: realplayer

RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file th...

📅 2012-12-19
CVSS 9.3 Dossier →
CVE-2012-4987 UNKNOWN
Component: realplayer

Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP fi...

📅 2012-11-04
CVSS 6.8 Dossier →
CVE-2012-3234 UNKNOWN
Component: realplayer

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame si...

📅 2012-09-12
CVSS 7.5 Dossier →
CVE-2012-2410 UNKNOWN
Component: realplayer

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote atta...

📅 2012-09-12
CVSS 6.8 Dossier →
CVE-2012-2409 UNKNOWN
Component: realplayer

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote atta...

📅 2012-09-12
CVSS 7.5 Dossier →
CVE-2012-2408 UNKNOWN
Component: realplayer

The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attacker...

📅 2012-09-12
CVSS 6.8 Dossier →
Page 1 of 9 (211 Total Records)