CVE-2012-0923 describes a critical vulnerability in the RV20 codec within RealNetworks RealPlayer versions 11.x, 14.x, 15.x (before 15.02.71), and RealPlayer SP 1.0 through 1.1.5. This flaw, a CWE-94 improper control of generation of code, allows remote attackers to execute arbitrary code by manipulating the frame size array in a crafted RealVideo stream. With a CVSS score of 9.3, it represents a high-severity risk, indicating that an unauthenticated attacker can achieve complete compromise of confidentiality, integrity, and availability with medium attack complexity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
14.0.0CPE matchmatch criteria | cpe:2.3:a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:* | ||
14.0.1CPE matchmatch criteria | cpe:2.3:a:realnetworks:realplayer:14.0.1:*:*:*:*:*:*:* | ||
14.0.1.609CPE matchmatch criteria | cpe:2.3:a:realnetworks:realplayer:14.0.1.609:*:*:*:*:*:*:* | ||
14.0.1.633CPE matchmatch criteria | cpe:2.3:a:realnetworks:realplayer:14.0.1.633:*:*:*:*:*:*:* | ||
14.0.2CPE matchmatch criteria | cpe:2.3:a:realnetworks:realplayer:14.0.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.