RealPlayer multiple vulns - update available
- http://secunia.com/advisories/38218/2/
Release Date: 2010-01-20
Critical: Highly critical
Impact: DoS, System access
Where: From remote
Solution Status: Vendor Patch
Software: Helix Player 1.x, Helix Player 11.x, RealPlayer 10.x, RealPlayer 11.x, RealPlayer Enterprise 1.x, RealPlayer SP 1.x
Solution: Update to the latest version. Please see the vendor's advisory for details: http://service.real.com/realplayer/securit…2010_player/en/
- http://atlas.arbor.net/briefs/index#-654730286
February 15, 2010 - "High Severity… Analysis: This is a high severity risk that we encourage all sites to remedy as soon as possible…"
RealPlayer SP version 1.1.5 released
- http://secunia.com/advisories/41154/
Release Date: 2010-08-27
Criticality level: Highly critical
Impact: System access
Where: From remote
Software: RealPlayer 11.x
CVE Reference(s): CVE-2010-0116, CVE-2010-0117, CVE-2010-0120, CVE-2010-2996, CVE-2010-3000, CVE-2010-3001, CVE-2010-3002
… The vulnerabilities are reported in version 11.1 and prior.
- http://secunia.com/advisories/41096/
… The vulnerabilities are reported in version 1.1.4 and prior.
Solution: Upgrade to RealPlayer SP version 1.1.5.
Original Advisory: RealNetworks: http://service.real.com/realplayer/securit…2010_player/en/
Real Alternative 2.02
- http://filehippo.com/download_real_alternative/
"… latest version contains: Media Player Classic - a freeware media player that supports both Real Alternative and QuickTime Alternative…"
RealPlayer v14.0.0 released
- http://www.securitytracker.com/id?1024861
Dec 10 2010
Version: prior to 14.0.0
Description: Multiple vulnerabilities were reported in RealPlayer. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary code on the target system. The code will run with the privileges of the target user. RealPlayer Enterprise is also affected…
CVE Reference: CVE-2010-0121, CVE-2010-0125, CVE-2010-2579, CVE-2010-2997, CVE-2010-2999, CVE-2010-4375, CVE-2010-4376, CVE-2010-4377, CVE-2010-4378, CVE-2010-4379, CVE-2010-4380, CVE-2010-4381, CVE-2010-4382, CVE-2010-4383, CVE-2010-4384, CVE-2010-4385, CVE-2010-4386, CVE-2010-4387, CVE-2010-4388, CVE-2010-4389, CVE-2010-4390, CVE-2010-4391, CVE-2010-4392, CVE-2010-4394, CVE-2010-4395, CVE-2010-4396, CVE-2010-4397
- http://www.h-online.com/security/news/item…er-1151696.html
12 December 2010, 22:39 - "… Those who still use a vulnerable RealPlayer should install the update immediately – or take the opportunity to uninstall the program if it is no longer in use. If left unpatched, it is a serious security risk."
- http://secunia.com/advisories/43847/
Last Update: 2011-04-13
Criticality level: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Solution: Update to version 14.0.3…
- http://www.securitytracker.com/id/1025351
Apr 13 2011
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 14.0.3
Description: A vulnerability was reported in RealPlayer. A remote user can cause arbitrary code to be executed on the target user's system…
RealPlayer
- http://www.securitytracker.com/id/1025943
Aug 17 2011
CVE Reference: CVE-2011-2945, CVE-2011-2946, CVE-2011-2947, CVE-2011-2948, CVE-2011-2949, CVE-2011-2950, CVE-2011-2951, CVE-2011-2952, CVE-2011-2953, CVE-2011-2954, CVE-2011-2955
Impact: Execution of arbitrary code via network, User access via network
Version(s): prior to 14.0.6
RealPlayer Enterprise
- http://www.securitytracker.com/id/1025944
Aug 17 2011
CVE Reference: CVE-2011-2947, CVE-2011-2948, CVE-2011-2949, CVE-2011-2952, CVE-2011-2955
Impact: Execution of arbitrary code via network, User access via network
Version(s): 2.0 – 2.1.5
Solution: The vendor has issued a fix (2.1.6).
RealPlayer v15.0.2.71 released
- https://secunia.com/advisories/47896/
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-0922, CVE-2012-0923, CVE-2012-0924, CVE-2012-0925, CVE-2012-0926, CVE-2012-0927
… vulnerabilities are reported in version 15.0.1.13 and prior.
Solution: Update to version 15.0.2.71.
Original Advisory: RealPlayer: http://service.real.com/realplayer/securit…2012_player/en/
RealPlayer v15.0.4.53 released
- https://secunia.com/advisories/49193/
Release Date: 2012-05-16
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-1904, CVE-2012-2406, CVE-2012-2411
… vulnerabilities are reported in versions 15.0.3.37 and prior.
Solution: Update to version 15.0.4.53.
Original Advisory: http://service.real.com/realplayer/securit…2012_player/en/
Realplayer v15.0.6.14 released
- https://secunia.com/advisories/50566/
Release Date: 2012-09-10
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-2407, CVE-2012-2408, CVE-2012-2409, CVE-2012-2410, CVE-2012-3234
… vulnerabilities are reported in versions 15.0.2.72 and prior.
Solution: Update to version 15.0.3.37 or later.
Original Advisory: http://service.real.com/realplayer/securit…2012_player/en/
Updated September 7, 2012 - current version RealPlayer 15.0.6.14
Mac RealPlayer v12.0.1.1750 released
- https://secunia.com/advisories/50580/
Release Date: 2012-09-10
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-2407, CVE-2012-2408, CVE-2012-2409, CVE-2012-2410, CVE-2012-3234
… vulnerabilities are reported in versions 12.0.0.1701 and prior.
Solution: Update to version 12.0.1.1750.
Original Advisory: http://service.real.com/realplayer/securit…2012_player/en/
Updated September 7, 2012 - current version Mac RealPlayer 12.0.1.1750
RealPlayer v16.0.0.282 released
- https://secunia.com/advisories/51589/
Release Date: 2012-12-17
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-5690, CVE-2012-5691
… vulnerabilities are reported in version 15.0.6.14 and prior.
Solution: Upgrade to version 16.0.0.282.
Original Advisory: http://service.real.com/realplayer/securit…2012_player/en/
- http://www.securitytracker.com/id/1027893
CVE Reference: CVE-2012-5690, CVE-2012-5691
Dec 17 2012
Impact: Execution of arbitrary code via network, User access via network
Version(s): 14.0.0 – 15.0.6.14
Impact: A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution: The vendor has issued a fix (16.0.0.282).
RealPlayer v16.0.3.51 released
- https://secunia.com/advisories/54621/
Release Date: 2013-08-26
Criticality: Highly Critical
Where: From remote
Impact: System access
CVE Reference(s): CVE-2013-4973, CVE-2013-4974
…vulnerabilities are reported in versions 16.0.2.32 and prior.
Solution: Update to version 16.0.3.51.
Original Advisory: http://service.real.com/realplayer/securit…2013_player/en/
