What’s Vulnerable › Vulnerabilities

CVE-2012-2407

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-09-12 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking.

Affected products

• RealNetworks Realplayer: through 15.0.5.109; 2.1.2, 2.1.3, 2.1.4, 4, 5, 6 (+27)
• RealNetworks Realplayer Sp: 1.0.0, 1.0.1, 1.0.2, 1.0.5, 1.1, 1.1.1 (+4)

References

• http://service.real.com/realplayer/security/09072012_player/en/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78384
• http://service.real.com/realplayer/security/09072012_player/en/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78384

Get alerted when CVE-2012-2407 or the next vulnerability affects your stack