Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

RealPlayer may let attackers run programs on your computer

CVE-2011-4253 · published 14 years ago
Summary

Older versions of RealPlayer for Windows (before version 15.0.0) and Mac (before version 12.0.0.1703) contain a flaw that could let a remote attacker run code on your system. This could lead to unauthorized actions, data loss, or further infection. Upgrade to the latest RealPlayer release or switch to an alternative media player to protect your devices.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
realnetworks realplayer <= 12.0.0.1701
7.0
8.0
10.0
10.0.0.305
10.0.0.331
10.1
12.0.0.1569
<= 14.0.7
4
5
6
23 more version ranges
cpe:2.3:a:realnetworks:realplayer:*:*:mac_os:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
4% chance of attack within 30 days
Timeline
Published24 Nov 2011
Updated24 Oct 2026
First seen29 Sep 2026
Sources
CVE-2011-4253 · NVD
Track software like this
Free during beta