CVE-2012-0926
Summary
| CVE | CVE-2012-0926 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-02-08 15:55:00 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Realnetworks | Realplayer | 11.0 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.1 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.2 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.2.1744 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.2.2315 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.3 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.4 | All | All | All |
| Application | Realnetworks | Realplayer | 11.0.5 | All | All | All |
| Application | Realnetworks | Realplayer | 11.1 | All | All | All |
| Application | Realnetworks | Realplayer | 11.1.3 | All | All | All |
| Application | Realnetworks | Realplayer | 11_build_6.0.14.748 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.0 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.1 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.1.609 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.1.633 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.2 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.3 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.4 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.5 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.6 | All | All | All |
| Application | Realnetworks | Realplayer | 14.0.7 | All | All | All |
| Application | Realnetworks | Realplayer | 15.0.0 | All | All | All |
| Application | Realnetworks | Realplayer | 15.0.1.13 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.0 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.1 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.2 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.0.5 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.1 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.2 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.3 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.4 | All | All | All |
| Application | Realnetworks | Realplayer Sp | 1.1.5 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| February 2012 Update | af854a3a-2127-422b-91ae-364da2661108 | service.real.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.