PT-2013-3376 · Realnetworks · Realplayer Sp+1

Publicado

2013-03-20

·

Atualizado

2013-03-21

·

CVE-2013-1750

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 16.0.1.18 RealPlayer SP versions 1.0 through 1.1.5
Description The issue is related to a heap-based buffer overflow that can be triggered by a malformed MP4 file, allowing remote attackers to execute arbitrary code.
Recommendations For RealPlayer versions prior to 16.0.1.18, update to version 16.0.1.18 or later. For RealPlayer SP versions 1.0 through 1.1.5, update to a version later than 1.1.5.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-1750

Produtos afetados

Realplayer
Realplayer Sp