CVE-2013-4973 Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file.
HighCVSS 9.3
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | <= 16.0.2.32 | No fix listed |
| realnetworks realplayer | = 10.0 | No fix listed |
| realnetworks realplayer | = 10.5 | No fix listed |
| realnetworks realplayer | = 11.0 | No fix listed |
| realnetworks realplayer | = 11.0.1 | No fix listed |
| realnetworks realplayer | = 11.0.2 | No fix listed |
| realnetworks realplayer | = 11.0.2.1744 | No fix listed |
| realnetworks realplayer | = 11.0.2.2315 | No fix listed |
| realnetworks realplayer | = 11.0.3 | No fix listed |
| realnetworks realplayer | = 11.0.4 | No fix listed |
| realnetworks realplayer | = 11.0.5 | No fix listed |
| realnetworks realplayer | = 11.1 | No fix listed |
| realnetworks realplayer | = 11.1.3 | No fix listed |
| realnetworks realplayer | = 11_build_6.0.14.748 | No fix listed |
| realnetworks realplayer | = 12.0.0.1444 | No fix listed |
| realnetworks realplayer | = 12.0.0.1548 | No fix listed |
| realnetworks realplayer | = 14.0.0 | No fix listed |
| realnetworks realplayer | = 14.0.1 | No fix listed |
| realnetworks realplayer | = 14.0.1.609 | No fix listed |
| realnetworks realplayer | = 14.0.2 | No fix listed |
| realnetworks realplayer | = 14.0.3 | No fix listed |
| realnetworks realplayer | = 14.0.4 | No fix listed |
| realnetworks realplayer | = 14.0.5 | No fix listed |
| realnetworks realplayer | = 15.0.0 | No fix listed |
| realnetworks realplayer | = 15.0.4 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 15.0.4.43 | No fix listed |
| realnetworks realplayer | = 15.0.5.109 | No fix listed |
| realnetworks realplayer | = 15.0.6.14 | No fix listed |
| realnetworks realplayer | = 15.02.71 | No fix listed |
| realnetworks realplayer | = 16.0.0 | No fix listed |
| realnetworks realplayer | = 16.0.0.282 | No fix listed |
| realnetworks realplayer | = 16.0.1.18 | No fix listed |
| realnetworks realplayer sp | = 1.0.0 | No fix listed |
| realnetworks realplayer sp | = 1.0.1 | No fix listed |
| realnetworks realplayer sp | = 1.0.2 | No fix listed |
| realnetworks realplayer sp | = 1.0.5 | No fix listed |
| realnetworks realplayer sp | = 1.1 | No fix listed |
| realnetworks realplayer sp | = 1.1.1 | No fix listed |
| realnetworks realplayer sp | = 1.1.2 | No fix listed |
| realnetworks realplayer sp | = 1.1.3 | No fix listed |
| realnetworks realplayer sp | = 1.1.4 | No fix listed |
| realnetworks realplayer sp | = 1.1.5 | No fix listed |
References
- service.real.com vendor-advisory
- VU#246524 third-party-advisory us-government-resource
- 61989 vdb-entry