CVE-2011-2949

HIGH · CVSS 9.3 EPSS 5.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-08-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-2949

Severity

HIGH

CVSS

9.3

EPSS

5.03%

Original Filing — NVD Description

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.