Lucene search

[email protected]CVE-2012-2408

HistorySep 12, 2012 - 10:38 a.m.

CVE-2012-2408

2012-09-1210:38:00

CWE-119

[email protected]

web.nvd.nist.gov

aac sdk

realnetworks

realplayer

cve-2012-2408

remote attack

denial of service

heap memory corruption

7.5 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.1%

JSON

The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq15.0.2.72
realnetworks:realplayerrealnetworks realplayereq10.0
realnetworks:realplayerrealnetworks realplayereq11.0.4
realnetworks:realplayerrealnetworks realplayereq2.1.3
realnetworks:realplayerrealnetworks realplayereq4
realnetworks:realplayerrealnetworks realplayereq14.0.3
realnetworks:realplayerrealnetworks realplayerle15.0.5.109
realnetworks:realplayerrealnetworks realplayereq5
realnetworks:realplayerrealnetworks realplayereq14.0.1

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	15.0.2.72
realnetworks:realplayer	realnetworks realplayer	eq	10.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.4
realnetworks:realplayer	realnetworks realplayer	eq	2.1.3
realnetworks:realplayer	realnetworks realplayer	eq	4
realnetworks:realplayer	realnetworks realplayer	eq	14.0.3
realnetworks:realplayer	realnetworks realplayer	le	15.0.5.109
realnetworks:realplayer	realnetworks realplayer	eq	5
realnetworks:realplayer	realnetworks realplayer	eq	14.0.1

Rows per page:

1-10 of 441

References

service.real.com/realplayer/security/09072012_player/en/

exchange.xforce.ibmcloud.com/vulnerabilities/78385

7.5 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.1%

JSON

Related for CVE-2012-2408

prion1 cvelist1 openvas4 nessus2