VULNERABILITY INTELLIGENCE

CVE-2011-2954

CVSS score9.3 HIGH
EPSS probability3.68%
CISA KEVNot currently listed
Published2011-08-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors.

Primary references