# CVEs published 2011-11-24 22 CVEs were published on November 24, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-4244](https://cve.now/CVE-2011-4244.md): Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2011-4245](https://cve.now/CVE-2011-4245.md): The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute… (no CVSS) - [CVE-2011-4246](https://cve.now/CVE-2011-4246.md): The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2011-4247](https://cve.now/CVE-2011-4247.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream. (no CVSS) - [CVE-2011-4248](https://cve.now/CVE-2011-4248.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file. (no CVSS) - [CVE-2011-4249](https://cve.now/CVE-2011-4249.md): Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via… (no CVSS) - [CVE-2011-4250](https://cve.now/CVE-2011-4250.md): Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote… (no CVSS) - [CVE-2011-4251](https://cve.now/CVE-2011-4251.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file. (no CVSS) - [CVE-2011-4252](https://cve.now/CVE-2011-4252.md): The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2011-4253](https://cve.now/CVE-2011-4253.md): Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote… (no CVSS) - [CVE-2011-4254](https://cve.now/CVE-2011-4254.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request. (no CVSS) - [CVE-2011-4255](https://cve.now/CVE-2011-4255.md): Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to… (no CVSS) - [CVE-2011-4256](https://cve.now/CVE-2011-4256.md): The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index… (no CVSS) - [CVE-2011-4257](https://cve.now/CVE-2011-4257.md): The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data. (no CVSS) - [CVE-2011-4258](https://cve.now/CVE-2011-4258.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR… (no CVSS) - [CVE-2011-4259](https://cve.now/CVE-2011-4259.md): Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in… (no CVSS) - [CVE-2011-4260](https://cve.now/CVE-2011-4260.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file. (no CVSS) - [CVE-2011-4261](https://cve.now/CVE-2011-4261.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory… (no CVSS) - [CVE-2011-4262](https://cve.now/CVE-2011-4262.md): Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file. (no CVSS) - [CVE-2011-4160](https://cve.now/CVE-2011-4160.md): Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local… (no CVSS) - [CVE-2011-4312](https://cve.now/CVE-2011-4312.md): Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow… (no CVSS) - [CVE-2011-4548](https://cve.now/CVE-2011-4548.md): Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2011-11-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.