CVE-2012-1904

mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.

Affected products

Apple Quicktime, Realplayer

Realnetworks Realplayer

≤ 15.0.0, 4, 5, 6, 7, 8, 10.0, 10.5, 11.0, 11.0.1, 11.0.2, 11.0.2.1744, 11.0.2.2315, 11.0.3, 11.0.4, 11.0.5, 11.1, 11.1.3, 11_build_6.0.14.748, 12.0.0.1444, 12.0.0.1548, 14.0.0, 14.0.1, 14.0.1.609, 14.0.2, 14.0.3, 14.0.4, 14.0.5

Fix

Available

CVSS 2.0

4.3 MEDIUM

EPSS

4.7% (91th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2012-03-28