cpe:/a:realnetworks:realplayer:2.0::enterprise cpe:/a:realnetworks:realplayer:2.1::enterprise cpe:/a:realnetworks:realplayer:2.1.2::enterprise cpe:/a:realnetworks:realplayer:2.1.3::enterprise cpe:/a:realnetworks:realplayer:2.1.4::enterprise cpe:/a:realnetworks:realplayer:2.1.5::enterprise cpe:/a:realnetworks:realplayer:11.0 cpe:/a:realnetworks:realplayer:11.1 cpe:/a:realnetworks:realplayer:14.0.0 cpe:/a:realnetworks:realplayer:14.0.1 cpe:/a:realnetworks:realplayer:14.0.2 cpe:/a:realnetworks:realplayer:14.0.3 cpe:/a:realnetworks:realplayer:14.0.4 cpe:/a:realnetworks:realplayer:14.0.5 cpe:/a:realnetworks:realplayer_sp:1.0.0 cpe:/a:realnetworks:realplayer_sp:1.0.1 cpe:/a:realnetworks:realplayer_sp:1.0.2 cpe:/a:realnetworks:realplayer_sp:1.0.5 cpe:/a:realnetworks:realplayer_sp:1.1 cpe:/a:realnetworks:realplayer_sp:1.1.1 cpe:/a:realnetworks:realplayer_sp:1.1.2 cpe:/a:realnetworks:realplayer_sp:1.1.3 cpe:/a:realnetworks:realplayer_sp:1.1.4 cpe:/a:realnetworks:realplayer_sp:1.1.5 CVE-2011-2953 2011-08-18T19:55:01.117-04:00 2011-10-05T22:50:43.723-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2011-08-19T16:29:00.000-04:00 SECTRACK 1025943 CONFIRM http://service.real.com/realplayer/security/08162011_player/en/ An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors, related to an out-of-bounds condition.