NetSight
critical10.0

CVE-2011-2953

An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, a…

Impact

An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.

Affected products

VendorProductAffected versions
RealnetworksRealplayer
Versions 11.0, 11.1, 14.0.0, 14.0.1, 14.0.2, 14.0.3
RealnetworksRealplayer Sp
Versions 1.0.0, 1.0.1, 1.0.2, 1.0.5, 1.1, 1.1.1

Weakness classification

References