Show filters
212 Total Results
Displaying 31-40 of 212
Sort by:
Attacker Value
Unknown
CVE-2012-1984
Disclosure Date: April 17, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-1923
Disclosure Date: April 17, 2012 (last updated October 04, 2023)
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.
0
Attacker Value
Unknown
CVE-2012-2268
Disclosure Date: April 17, 2012 (last updated October 04, 2023)
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different vulnerability than CVE-2012-1923.
0
Attacker Value
Unknown
CVE-2012-0942
Disclosure Date: April 17, 2012 (last updated October 04, 2023)
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials.
0
Attacker Value
Unknown
CVE-2012-1904
Disclosure Date: March 28, 2012 (last updated October 04, 2023)
mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.
0
Attacker Value
Unknown
CVE-2012-0924
Disclosure Date: February 08, 2012 (last updated October 04, 2023)
RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.
0
Attacker Value
Unknown
CVE-2012-0922
Disclosure Date: February 08, 2012 (last updated October 04, 2023)
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
0
Attacker Value
Unknown
CVE-2012-0923
Disclosure Date: February 08, 2012 (last updated October 04, 2023)
The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.
0
Attacker Value
Unknown
CVE-2012-0926
Disclosure Date: February 08, 2012 (last updated October 04, 2023)
The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream.
0
Attacker Value
Unknown
CVE-2012-0928
Disclosure Date: February 08, 2012 (last updated October 04, 2023)
The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file.
0
