CVE-2011-2950

no score yetEPSS 29%

Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.

EPSS: 29% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2011-08-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:realplayer
realnetworks:realplayer_sp

References

http://securityreason.com/securityalert/8388
http://service.real.com/realplayer/security/08162011_player/en/
http://www.securityfocus.com/bid/49172
http://www.securitytracker.com/id?1025943
http://zerodayinitiative.com/advisories/ZDI-11-265/

Check your stack JSON