PT-2013-5313 · Realnetworks · Realplayer+1

Published 2013-08-26 · Updated 2013-09-12 · CVE-2013-4974

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 16.0.3.51 RealPlayer SP versions 1.0 through 1.1.5

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a malformed RealMedia file.

Recommendations For versions prior to 16.0.3.51, update to version 16.0.3.51 or later. For RealPlayer SP versions 1.0 through 1.1.5, update to a version later than 1.1.5.

Fix

DoS

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-4974

Affected Products

Realplayer

Realplayer Sp

References · 3

• http://service.real.com/realplayer/security/08232013_player/en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4974 · Security Note
• http://securityfocus.com/bid/61990 · Note