PT-2008-4492 · Realnetworks · Realplayer 10.5+3

Publicado 2008-07-28 · Atualizado 2018-10-30 · CVE-2008-3064

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: RealPlayer versions prior to 6.0.12.1675 RealPlayer 10 versions prior to 6.0.12.1675 RealPlayer 10.5 versions prior to 6.0.12.1675 RealPlayer Enterprise versions prior to 6.0.12.1675

Description: The issue is related to a local resource reference vulnerability, potentially allowing access to local files. The exact impact and attack vectors are unknown.

Recommendations: For RealPlayer versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later. For RealPlayer 10 versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later. For RealPlayer 10.5 versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later. For RealPlayer Enterprise versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-3064

Produtos afetados

Realplayer

Realplayer 10

Realplayer 10.5

Realplayer Enterprise

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/44014 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3064 · Nota de Segurança
• http://securitytracker.com/id?1020564 · Nota
• http://vupen.com/english/advisories/2008/2194/references · Nota
• http://securityfocus.com/archive/1/494934/100/0/threaded · Nota
• http://service.real.com/realplayer/security/07252008_player/en · Aviso do Fabricante
• http://securityfocus.com/bid/30378 · Nota