Vulnerability Details : CVE-2011-2950

Exploit prediction scoring system (EPSS) score for CVE-2011-2950

Metasploit modules for CVE-2011-2950

• RealNetworks Realplayer QCP Parsing Heap Overflow

  Disclosure Date: 2011-08-16

  First seen: 2020-04-26

  exploit/windows/browser/realplayer_qcp

  This module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop.

  More information

CVSS scores for CVE-2011-2950

CWE ids for CVE-2011-2950

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-2950

Products affected by CVE-2011-2950