CVE-2011-2949

Published 18 Aug 2011 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.0%

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.

Affected products

n/a · n/a

References

http://service.real.com/realplayer/security/08162011_player/en/http://www.securitytracker.com/id?1025943 http://zerodayinitiative.com/advisories/ZDI-11-267/