Buffer overflow in Realnetworks Realplayer
CVE-2011-2949
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.
Vulnerability class: Buffer Overflow
EPSS: 0.050 (91.4th percentile) — read the EPSS interpretation.
Affected products
- Realnetworks Realplayer — versions 11.0, 11.1, 14.0.0
- Realnetworks Realplayer_sp — versions 1.0.0, 1.0.1, 1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC)