Real Networks RealPlayer Multiple Remote Vulnerabilities

Bugtraq ID:	53555
Class:	Unknown
CVE:	CVE-2012-1904 CVE-2012-2406 CVE-2012-2411
Remote:	Yes
Local:	No
Published:	May 16 2012 12:00AM
Updated:	May 16 2012 12:00AM
Credit:	Craig Young of nCircle, Tom Gallagher via Beyond Security's SecuriTeam, and Sebastian Apelt
Vulnerable:	Real Networks RealPlayer 11 Beta 6.0.14 .550 Real Networks RealPlayer 15.2.71 Real Networks RealPlayer 15.1.13 Real Networks RealPlayer 14.0.7 Real Networks RealPlayer 14.0.2 633 Real Networks RealPlayer 11.0.5 Real Networks RealPlayer 11.0.4 Real Networks RealPlayer 11.0.3 Real Networks RealPlayer 11.0.2 Real Networks RealPlayer 11.0.1 Real Networks RealPlayer 15.0.3.37 Real Networks RealPlayer 15.0 Real Networks RealPlayer 14.0.6 Real Networks RealPlayer 14.0.5 Real Networks RealPlayer 14.0.3 Real Networks RealPlayer 14.0.2 Real Networks RealPlayer 14.0.1.633 Real Networks RealPlayer 14.0.1.609 Real Networks RealPlayer 14.0.1 Real Networks RealPlayer 14.0.0 Real Networks RealPlayer 12.0.0.343 Real Networks RealPlayer 12.0.0.1548 Real Networks RealPlayer 12.0.0.1444 Real Networks RealPlayer 11.1 Real Networks RealPlayer 11.0.2.2315 Real Networks RealPlayer 11.0.2.1744 Real Networks RealPlayer 11 Beta Real Networks RealPlayer 11
Not Vulnerable:	Real Networks RealPlayer 15.0.4.53

Real Networks RealPlayer Multiple Remote Vulnerabilities

Real Networks RealPlayer is prone to multiple security vulnerabilities.

Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Failed attacks may cause denial-of-service conditions.

Real Networks RealPlayer Multiple Remote Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Real Networks RealPlayer Multiple Remote Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Real Networks RealPlayer Multiple Remote Vulnerabilities

References:

• RealPlayer Homepage (Real Networks )
  
• RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)