CVE-2011-4252: Realnetworks Realplayer

High severity, CVSS 9.3. EPSS: 3.6% chance of exploitation in the next 30 days.

The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.

Affected products

• Realnetworks Realplayer: up to and including 12.0.0.1701; version 7.0 only; version 8.0 only; version 10.0 only; version 10.0.0.305 only; version 10.0.0.331 only; …

Published 2011-11-24. Last modified 2026-06-16.