# CVEs published 2011-11-24 22 CVEs were published on November 24, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-4244](https://cve.now/CVE-2011-4244.md): Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary c (no CVSS) - [CVE-2011-4245](https://cve.now/CVE-2011-4245.md): The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arb (no CVSS) - [CVE-2011-4246](https://cve.now/CVE-2011-4246.md): The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary co (no CVSS) - [CVE-2011-4247](https://cve.now/CVE-2011-4247.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream. (no CVSS) - [CVE-2011-4248](https://cve.now/CVE-2011-4248.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file. (no CVSS) - [CVE-2011-4249](https://cve.now/CVE-2011-4249.md): Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecifi (no CVSS) - [CVE-2011-4250](https://cve.now/CVE-2011-4250.md): Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote att (no CVSS) - [CVE-2011-4251](https://cve.now/CVE-2011-4251.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file. (no CVSS) - [CVE-2011-4252](https://cve.now/CVE-2011-4252.md): The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary c (no CVSS) - [CVE-2011-4253](https://cve.now/CVE-2011-4253.md): Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote att (no CVSS) - [CVE-2011-4254](https://cve.now/CVE-2011-4254.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request. (no CVSS) - [CVE-2011-4255](https://cve.now/CVE-2011-4255.md): Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute (no CVSS) - [CVE-2011-4256](https://cve.now/CVE-2011-4256.md): The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value (no CVSS) - [CVE-2011-4257](https://cve.now/CVE-2011-4257.md): The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data. (no CVSS) - [CVE-2011-4258](https://cve.now/CVE-2011-4258.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file (no CVSS) - [CVE-2011-4259](https://cve.now/CVE-2011-4259.md): Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an (no CVSS) - [CVE-2011-4260](https://cve.now/CVE-2011-4260.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file. (no CVSS) - [CVE-2011-4261](https://cve.now/CVE-2011-4261.md): RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption (no CVSS) - [CVE-2011-4262](https://cve.now/CVE-2011-4262.md): Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file. (no CVSS) - [CVE-2011-4160](https://cve.now/CVE-2011-4160.md): Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local use (no CVSS) - [CVE-2011-4312](https://cve.now/CVE-2011-4312.md): Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remot (no CVSS) - [CVE-2011-4548](https://cve.now/CVE-2011-4548.md): Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-11-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.