CVE-2011-1426

Severity

93%

Complexity

86%

Confidentiality

165%

The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX file.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

RealNetworks RealPlayer

First reported 13 years ago

2011-04-18 18:55:00

Last updated 6 years ago

2018-10-09 19:30:00

Affected Software

RealNetworks RealPlayer 11.0

11.0

RealNetworks RealPlayer 11.1

11.1

RealNetworks RealPlayer 14.0.0

14.0.0

RealNetworks RealPlayer 14.0.1

14.0.1

RealNetworks RealPlayer 14.0.2

14.0.2

RealNetworks RealPlayer SP 1.0.0

1.0.0

RealNetworks RealPlayer SP 1.0.1

1.0.1

RealNetworks RealPlayer SP 1.0.2

1.0.2

RealNetworks RealPlayer SP 1.0.5

1.0.5

RealNetworks RealPlayer SP 1.1

1.1

RealNetworks RealPlayer SP 1.1.1

1.1.1

RealNetworks RealPlayer SP 1.1.2

1.1.2

RealNetworks RealPlayer SP 1.1.3

1.1.3

RealNetworks RealPlayer SP 1.1.4

1.1.4

RealNetworks RealPlayer SP 1.1.5

1.1.5

References

1025351

http://service.real.com/realplayer/security/04122011_player/en/

Vendor Advisory

20110412 ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability

47335

ADV-2011-0979