CVE-2012-3234

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.

Published: 2012-09-12 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2012-3234 is rated Moderate Risk (54.2/100): CVSS High severity, with medium exploitation likelihood (EPSS 1.31%). Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2012-3234

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.46% 1.31% +0.85%
2 2025-03-17 0.40% 0.46% +0.06%
3 2024-12-17 — 0.40% —

Full EPSS history (6 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2012-3234

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 10.0 6.4 [email protected]

Weakness enumeration for CVE-2012-3234

Affected software / configurations for CVE-2012-3234

Vendor Product Version Raw CPE
realnetworks realplayer <= 15.0.5.109 cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*
realnetworks realplayer 2.1.2 cpe:2.3:a:realnetworks:realplayer:2.1.2:*:enterprise:*:*:*:*:*
realnetworks realplayer 2.1.3 cpe:2.3:a:realnetworks:realplayer:2.1.3:*:enterprise:*:*:*:*:*
realnetworks realplayer 2.1.4 cpe:2.3:a:realnetworks:realplayer:2.1.4:*:enterprise:*:*:*:*:*
realnetworks realplayer 4 cpe:2.3:a:realnetworks:realplayer:4:*:*:*:*:*:*:*
realnetworks realplayer 5 cpe:2.3:a:realnetworks:realplayer:5:*:*:*:*:*:*:*
realnetworks realplayer 6 cpe:2.3:a:realnetworks:realplayer:6:*:*:*:*:*:*:*
realnetworks realplayer 7 cpe:2.3:a:realnetworks:realplayer:7:*:*:*:*:*:*:*
realnetworks realplayer 8 cpe:2.3:a:realnetworks:realplayer:8:*:*:*:*:*:*:*
realnetworks realplayer 10.0 cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
realnetworks realplayer 10.5 cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
realnetworks realplayer 11.0 cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*
realnetworks realplayer 11.0.1 cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*
realnetworks realplayer 11.0.2 cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*
realnetworks realplayer 11.0.2.1744 cpe:2.3:a:realnetworks:realplayer:11.0.2.1744:*:*:*:*:*:*:*
realnetworks realplayer 11.0.2.2315 cpe:2.3:a:realnetworks:realplayer:11.0.2.2315:*:*:*:*:*:*:*
realnetworks realplayer 11.0.3 cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*
realnetworks realplayer 11.0.4 cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*
realnetworks realplayer 11.0.5 cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*
realnetworks realplayer 11.1 cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*
realnetworks realplayer 11.1.3 cpe:2.3:a:realnetworks:realplayer:11.1.3:*:*:*:*:*:*:*
realnetworks realplayer 11_build_6.0.14.748 cpe:2.3:a:realnetworks:realplayer:11_build_6.0.14.748:*:*:*:*:*:*:*
realnetworks realplayer 12.0.0.1444 cpe:2.3:a:realnetworks:realplayer:12.0.0.1444:*:*:*:*:*:*:*
realnetworks realplayer 12.0.0.1548 cpe:2.3:a:realnetworks:realplayer:12.0.0.1548:*:*:*:*:*:*:*
realnetworks realplayer 14.0.0 cpe:2.3:a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:*
realnetworks realplayer 14.0.1 cpe:2.3:a:realnetworks:realplayer:14.0.1:*:*:*:*:*:*:*
realnetworks realplayer 14.0.1.609 cpe:2.3:a:realnetworks:realplayer:14.0.1.609:*:*:*:*:*:*:*
realnetworks realplayer 14.0.2 cpe:2.3:a:realnetworks:realplayer:14.0.2:*:*:*:*:*:*:*
realnetworks realplayer 14.0.3 cpe:2.3:a:realnetworks:realplayer:14.0.3:*:*:*:*:*:*:*
realnetworks realplayer 14.0.4 cpe:2.3:a:realnetworks:realplayer:14.0.4:*:*:*:*:*:*:*
realnetworks realplayer 14.0.5 cpe:2.3:a:realnetworks:realplayer:14.0.5:*:*:*:*:*:*:*
realnetworks realplayer 15.0.2.72 cpe:2.3:a:realnetworks:realplayer:15.0.2.72:*:*:*:*:*:*:*
realnetworks realplayer 15.0.3.37 cpe:2.3:a:realnetworks:realplayer:15.0.3.37:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.0.0 cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.0.1 cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.0.2 cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.0.5 cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.1 cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.1.1 cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.1.2 cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.1.3 cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.1.4 cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*
realnetworks realplayer_sp 1.1.5 cpe:2.3:a:realnetworks:realplayer_sp:1.1.5:*:*:*:*:*:*:*
realnetworks realplayer 12.0.0.1701 cpe:2.3:a:realnetworks:realplayer:12.0.0.1701:*:mac:*:*:*:*:*

References for CVE-2012-3234

cvelogic Threat Intelligence