CVE-2014-3113 Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2) stsz atom in an MP4 file.
HighCVSS 9.3
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2) stsz atom in an MP4 file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | <= 17.0.8.22 | No fix listed |
| realnetworks realplayer | = 17.0.4.60 | No fix listed |
References
- 59238 third-party-advisory
- service.real.com vendor-advisory
- www.fortiguard.com
- 1030524 vdb-entry