high7.5Public exploit code
CVE-2013-7260
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RealNetworks RealPlayer 16.0.3.51/16.0.2.32 - '.rmp' Version Attribute Buffer Overflow2013-12-24 · local · windows · Verified
Impact
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Realplayer | through 17.0.4.60 Versions 2.1.2, 2.1.3, 2.1.4, 4, 5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://service.real.com/realplayer/security/12202013_player/en/
- http://www.exploit-db.com/exploits/30468/
- http://www.kb.cert.org/vuls/id/698278
- http://www.securityfocus.com/bid/64695
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90160
- http://service.real.com/realplayer/security/12202013_player/en/
- http://www.exploit-db.com/exploits/30468/
- http://www.kb.cert.org/vuls/id/698278
- http://www.securityfocus.com/bid/64695
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90160