PT-2013-5313 · Realnetworks · Realplayer+1

Publicado 2013-08-26 · Atualizado 2013-09-12 · CVE-2013-4974

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 16.0.3.51 RealPlayer SP versions 1.0 through 1.1.5

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a malformed RealMedia file.

Recommendations For versions prior to 16.0.3.51, update to version 16.0.3.51 or later. For RealPlayer SP versions 1.0 through 1.1.5, update to a version later than 1.1.5.

Correção

DoS

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-4974

Produtos afetados

Realplayer

Realplayer Sp

Referências · 3

• http://securityfocus.com/bid/61990 · Nota
• http://service.real.com/realplayer/security/08232013_player/en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4974 · Nota de Segurança