CVE-2012-0924

RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via…

published February 8, 2012

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

🚨 A cleverly constructed video stream can turn your RealPlayer into an unwitting accomplice! 🔥 Think of this vulnerability like a sneaky magician slipping a dangerous trick into a movie, where the audience—your RealPlayer—unwittingly performs the stunt without any safety checks. 🎩 An attacker could craft a malicious video that, when played, executes arbitrary code, potentially leading to a complete takeover of the affected system. Imagine your trusted media player suddenly following commands from a stranger—absolutely devastating!

Put simply

Think of this vulnerability like a sneaky magician slipping a dangerous trick into a movie, where the audience—your RealPlayer—unwittingly performs the stunt without any safety checks. 🎩 This vulnerability in RealNetworks RealPlayer allows remote attackers to execute arbitrary code through a specially crafted video stream header that includes a VIDOBJ_START_CODE. Versions prior to 15.02.71 are at risk, making it a serious concern for users.

What to do

An attacker could craft a malicious video that, when played, executes arbitrary code, potentially leading to a complete takeover of the affected system. Imagine your trusted media player suddenly following commands from a stranger—absolutely devastating! Upgrade RealPlayer to version 15.02.71 or higher immediately to patch this vulnerability. If you're unable to update, consider disabling the ability to play potentially untrusted video streams until you can secure your installation. Stay vigilant! You've got this! With a quick update, your media player will be back to safely entertaining you in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03682 · 89.6th percentile
Published
2012-02-08T15:00Z
EPSS history
Timeline
  • 08 FEB 15:00Z
    RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via…
    cvelistv5