CVE-2011-2953

no score yetEPSS 3.3%

An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2011-08-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:realplayer
realnetworks:realplayer_sp

References

http://service.real.com/realplayer/security/08162011_player/en/
http://www.securitytracker.com/id?1025943
http://service.real.com/realplayer/security/08162011_player/en/
http://www.securitytracker.com/id?1025943

Check your stack JSON