VULNERABILITY INTELLIGENCE
CVE-2012-0922
CVSS score9.3 HIGH
EPSS probability4.49%
CISA KEVNot currently listed
Published2012-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')