CVE-2012-0925

CVE-2012-0925 describes an unspecified vulnerability within the RV40 codec of RealNetworks RealPlayer versions 11.x, 14.x, 15.x (before 15.02.71), and RealPlayer SP 1.0 through 1.1.5. This critical vulnerability allows remote attackers to execute arbitrary code on affected systems by enticing a user to open a specially crafted RV40 RealVideo stream. With a CVSS score of 9.3, it poses a high risk of complete compromise (confidentiality, integrity, and availability) with moderate attack complexity and no authentication required. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it has not garnered significant attention from threat actors or the security community.