CVE-2012-1904 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 4.7% (pctl 92)
Patch early
A public exploit exists.
Description
mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| EPSS | 4.74% — more likely to be exploited than 92% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2012-03-28 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| realnetworks | realplayer |
| realnetworks | realplayer sp |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | RealPlayer - '.mp4' file handling memory Corruption | 2012-03-24 |
References
- http://packetstormsecurity.org/files/111162/RealPlayer-1.1.4-Memory-Corruption.html
- http://secunia.com/advisories/49193
- http://www.securitytracker.com/id?1027076
- http://packetstormsecurity.org/files/111162/RealPlayer-1.1.4-Memory-Corruption.html
- http://secunia.com/advisories/49193
- http://www.securitytracker.com/id?1027076
→ the Explorer · watch your stack · NVD