| Package | Affected versions | Patched versions |
|---|---|---|
| realplayer | = 10.0= 10.5= 11.0= 11.0.1= 11.0.2= 11.0.2.1744= 11.0.2.2315= 11.0.3= 11.0.4= 11.0.5= 11.1= 11.1.3= 11_build_6.0.14.748= 12.0.0.1444= 12.0.0.1548= 12.0.0.1701= 14.0.0= 14.0.1= 14.0.1.609= 14.0.2= 14.0.3= 14.0.4= 14.0.5= 15.0.2.72= 15.0.3.37= 2.1.2= 2.1.3= 2.1.4= 4= 5= 6= 7= 8≤ 15.0.5.109 | |
| realplayer sp | = 1.0.0= 1.0.1= 1.0.2= 1.0.5= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5 |
The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free