RealNetworks, Inc. Releases Update to Address
Security Vulnerabilities.
Updated
February 6, 2012
RealNetworks is making available product
upgrades that contain security bug fixes. We have received no reports of any
machines actually being compromised as a result of the now-remedied
vulnerabilities.
RealNetworks always recommends upgrading your
product to the most current version available to avoid security
vulnerabilities.
Current Software
The current
versions of our Player software are not affected by these vulnerabilities.
|
Software |
Affected? |
Operating System |
Language |
|
RealPlayer 15.02.71 |
No |
Windows
XP, Vista, Win7 |
All
Supported |
Affected Software
The table below
contains a summary of which previous and current versions of the RealPlayer
software are susceptible to these vulnerabilities. The columns and cells in
green are the versions of each product where the issue has been resolved.
|
CVE Number |
RealPlayer |
RealPlayer SP 1.0 – 1.1.5 |
RealPlayer 14.0.0 – 14.0.7 |
RealPlayer 15.0.0 – 15.0.1.13 |
RealPlayer 15.0 |
|
CVE-2012-0922
|
X |
X |
X |
X |
|
|
CVE-2012-0924 |
X |
X |
X |
X |
|
|
CVE-2012-0926
|
X |
X |
X |
X |
|
|
CVE-2012-0927
|
X |
X |
X |
X |
|
CVE Descriptions
CVE-2012-0922
RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability
Affected software: Windows RealPlayer 15.0.1.13 and prior.
Credit to Luigi Auriemma for reporting this
issue.
CVE-2012-0924
RealNetworks RealPlayer VIDOBJ_START_CODE Remote Code Execution Vulnerability
Affected software: Windows RealPlayer 15.0.1.13 and prior.
Credit to
Luigi Auriemma for reporting this issue.
CVE-2012-0926
RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability
Affected software: Windows RealPlayer 15.0.1.13 and prior.
Credit to
Dan Rosenberg of Virtual Security Research, Damian Put for reporting this
issue.
CVE-2012-0927
RealNetworks RealPlayer RealAudio coded_frame_size Remote Code Execution Vulnerability
Affected software: Windows RealPlayer 15.0.
Credit to
Luigi Auriemma for reporting this
issue.
Warranty:
RealNetworks Inc. endeavors to provide you with the highest quality products and
services, but cannot guarantee, and does not warrant, that the operation of any
RealNetworks product will be error-free,
uninterrupted or secure. Please see your original license agreement for details
of our limited warranty or warranty disclaimer.