CVE-2011-4249: Realnetworks Realplayer

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Realnetworks Realplayer: up to and including 14.0.7; version 4 only; version 5 only; version 6 only; version 7 only; version 8 only; …

Published 2011-11-24. Last modified 2026-06-16.