CVE-2014-3444 The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and appl...
HighCVSS 9.3
EPSS 5.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | <= 16.0.3.51 | No fix listed |
| realnetworks realplayer | = 16.0.0 | No fix listed |
| realnetworks realplayer | = 16.0.0.282 | No fix listed |
| realnetworks realplayer | = 16.0.1.18 | No fix listed |
| realnetworks realplayer | = 16.0.2.32 | No fix listed |
References
- packetstormsecurity.com exploit