PT-2012-6081 · Realnetworks · Realplayer Sp+1

Publicado 2012-12-19 · Atualizado 2012-12-19 · CVE-2012-5690

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 16.0.0.282 RealPlayer SP versions 1.0 through 1.1.5

Description The issue allows remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer.

Recommendations For RealPlayer versions prior to 16.0.0.282, update to version 16.0.0.282 or later. For RealPlayer SP versions 1.0 through 1.1.5, consider upgrading to a version outside of this range as a temporary workaround, until a patch is available.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-5690

Produtos afetados

Realplayer

Realplayer Sp

Referências · 2

• http://service.real.com/realplayer/security/12142012_player/en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-5690 · Nota de Segurança