CVE-2012-0923

no score yetEPSS 4.5%

The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2012-02-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:realplayer
realnetworks:realplayer_sp

References

http://osvdb.org/78912
http://secunia.com/advisories/47896
http://service.real.com/realplayer/security/02062012_player/en/
http://www.securityfocus.com/bid/51884
http://osvdb.org/78912

Check your stack JSON