NetSight
critical9.3Public exploit code

CVE-2014-3444

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.

Affected products

VendorProductAffected versions
RealnetworksRealplayer
through 16.0.3.51
Versions 16.0.0, 16.0.0.282, 16.0.1.18, 16.0.2.32

Weakness classification

References