PT-2008-4492 · Realnetworks · Realplayer 10.5+3

Published 2008-07-28 · Updated 2018-10-30 · CVE-2008-3064

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: RealPlayer versions prior to 6.0.12.1675 RealPlayer 10 versions prior to 6.0.12.1675 RealPlayer 10.5 versions prior to 6.0.12.1675 RealPlayer Enterprise versions prior to 6.0.12.1675

Description: The issue is related to a local resource reference vulnerability, potentially allowing access to local files. The exact impact and attack vectors are unknown.

Recommendations: For RealPlayer versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later. For RealPlayer 10 versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later. For RealPlayer 10.5 versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later. For RealPlayer Enterprise versions prior to 6.0.12.1675, update to version 6.0.12.1675 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-3064

Affected Products

Realplayer

Realplayer 10

Realplayer 10.5

Realplayer Enterprise

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-3064 · Security Note
• http://service.real.com/realplayer/security/07252008_player/en · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44014 · Note
• http://securitytracker.com/id?1020564 · Note
• http://vupen.com/english/advisories/2008/2194/references · Note
• http://securityfocus.com/archive/1/494934/100/0/threaded · Note
• http://securityfocus.com/bid/30378 · Note