CVE-2012-3234: Realnetworks Realplayer

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.

Affected products

• Realnetworks Realplayer: up to and including 15.0.5.109; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 4 only; version 5 only; …
• Realnetworks Realplayer SP: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.5 only; version 1.1 only; version 1.1.1 only; …

Published 2012-09-12. Last modified 2026-06-16.