VULNERABILITY INTELLIGENCE

CVE-2012-0928

CVSS score9.3 HIGH
EPSS probability3.65%
CISA KEVNot currently listed
Published2012-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references