VULNERABILITY INTELLIGENCE
CVE-2012-0923
CVSS score9.3 HIGH
EPSS probability4.48%
CISA KEVNot currently listed
Published2012-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')