CVE-2012-0923
Summary
| CVE | CVE-2012-0923 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-02-08 15:55:00 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Realnetworks | Realplayer | 11.0 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.1 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.2 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.2.1744 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.2.2315 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.3 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.4 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.5 | All | All | All |
| Application | Realnetworks | Realplayer | 11.1 | All | All | All |
| Application | Realnetworks | Realplayer | 11.1.3 | All | All | All |
| Application | Realnetworks | Realplayer | 11_build_6.0.14.748 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.0 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.1 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.1.609 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.1.633 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.2 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.3 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.4 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.5 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.6 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.7 | All | All | All |
| Application | Realnetworks | Realplayer | 15.0.0 | All | All | All |
| Application | Realnetworks | Realplayer | 15.0.1.13 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.0 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.1 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.2 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.5 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.1 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.2 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.3 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.4 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.5 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Real Networks RealPlayer RV20 Frame Size Remote Code Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| February 2012 Update | af854a3a-2127-422b-91ae-364da2661108 | service.real.com | Vendor Advisory |
| osvdb.org/78912 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.