CVE-2012-2411: Realnetworks Realplayer

High severity, CVSS 9.3. EPSS: 5.2% chance of exploitation in the next 30 days.

Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.

Affected products

• Realnetworks Realplayer: up to and including 15.0.4; version 4 only; version 5 only; version 6 only; version 7 only; version 8 only; …
• Realnetworks Realplayer SP: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.5 only; version 1.1 only; version 1.1.1 only; …

Published 2012-05-18. Last modified 2026-06-16.