CVE-2011-2587

Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file.

• CWE-119

• http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=1bce40644cddee93b4b1877a94a6ce345f32852c
• http://secunia.com/advisories/45066Vendor Advisory
• http://www.securityfocus.com/bid/48664
• http://www.videolan.org/security/sa1105.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68531
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14851
• http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=1bce40644cddee93b4b1877a94a6ce345f32852c
• http://secunia.com/advisories/45066Vendor Advisory
• http://www.securityfocus.com/bid/48664
• http://www.videolan.org/security/sa1105.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68531
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14851

Published

Jul 27, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2578Memory leak in Cisco IOS 15.1 and 15.2 allows remote attacke…
• CVE-2011-2581The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) befo…
• CVE-2011-2583Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 a…
• CVE-2011-2584Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1…
• CVE-2011-2585Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1…
• CVE-2011-2586The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assis…
• CVE-2011-2588Heap-based buffer overflow in the AVI_ChunkRead_strf functio…
• CVE-2011-2589Heap-based buffer overflow in the SendLogAction method in th…
• CVE-2011-2590The Play method in the UUPlayer ActiveX control 6.0.0.1 in U…
• CVE-2011-2591Multiple buffer overflows in the Provideo ActiveX controls a…
• CVE-2011-2592Heap-based buffer overflow in the StartEpa method in the nse…
• CVE-2011-2593Integer overflow in the StartEpa method in the nsepacom Acti…