The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified "memory access" via unknown vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 5.0 | MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| CWE ID | Type | Source |
|---|---|---|
| NVD-CWE-Other | Primary | nvd@nist.gov |
| Hyperlink | Source | Resource |
|---|---|---|
| http://service.real.com/realplayer/security/12102010_player/en/ | PSIRT-CNA@flexerasoftware.com | Vendor Advisory |
| http://www.securitytracker.com/id?1024861 | PSIRT-CNA@flexerasoftware.com | N/A |
| http://service.real.com/realplayer/security/12102010_player/en/ | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.securitytracker.com/id?1024861 | af854a3a-2127-422b-91ae-364da2661108 | N/A |