Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-2406
HistoryMay 18, 2012 - 6:55 p.m.

CVE-2012-2406

2012-05-1818:55:01
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.4%

JSON

RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.

Affected configurations

NVD
Node
realnetworksrealplayerRange≤15.0.4
OR
realnetworksrealplayerMatch4
OR
realnetworksrealplayerMatch5
OR
realnetworksrealplayerMatch6
OR
realnetworksrealplayerMatch7
OR
realnetworksrealplayerMatch8
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch11.0
OR
realnetworksrealplayerMatch11.0.1
OR
realnetworksrealplayerMatch11.0.2
OR
realnetworksrealplayerMatch11.0.2.1744
OR
realnetworksrealplayerMatch11.0.2.2315
OR
realnetworksrealplayerMatch11.0.3
OR
realnetworksrealplayerMatch11.0.4
OR
realnetworksrealplayerMatch11.0.5
OR
realnetworksrealplayerMatch11.1
OR
realnetworksrealplayerMatch11.1.3
OR
realnetworksrealplayerMatch11_build_6.0.14.748
OR
realnetworksrealplayerMatch12.0.0.1444
OR
realnetworksrealplayerMatch12.0.0.1548
OR
realnetworksrealplayerMatch14.0.0
OR
realnetworksrealplayerMatch14.0.1
OR
realnetworksrealplayerMatch14.0.1.609
OR
realnetworksrealplayerMatch14.0.2
OR
realnetworksrealplayerMatch14.0.3
OR
realnetworksrealplayerMatch14.0.4
OR
realnetworksrealplayerMatch14.0.5
OR
realnetworksrealplayerMatch15.0.0
OR
realnetworksrealplayerMatch15.0.1.13
OR
realnetworksrealplayerMatch15.02.71
OR
realnetworksrealplayer_spMatch1.0.0
OR
realnetworksrealplayer_spMatch1.0.1
OR
realnetworksrealplayer_spMatch1.0.2
OR
realnetworksrealplayer_spMatch1.0.5
OR
realnetworksrealplayer_spMatch1.1
OR
realnetworksrealplayer_spMatch1.1.1
OR
realnetworksrealplayer_spMatch1.1.2
OR
realnetworksrealplayer_spMatch1.1.3
OR
realnetworksrealplayer_spMatch1.1.4
OR
realnetworksrealplayer_spMatch1.1.5
Node
realnetworksrealplayer_spMatch1.0.0
OR
realnetworksrealplayer_spMatch1.0.1
OR
realnetworksrealplayer_spMatch1.0.2
OR
realnetworksrealplayer_spMatch1.0.5
OR
realnetworksrealplayer_spMatch1.1
OR
realnetworksrealplayer_spMatch1.1.1
OR
realnetworksrealplayer_spMatch1.1.2
OR
realnetworksrealplayer_spMatch1.1.3
OR
realnetworksrealplayer_spMatch1.1.4

Related

cve 1
prion 1
cvelist 1
nessus 2
openvas 2
cve
cve
CVE-2012-2406
2012-05-18 18:55:01
prion
prion
Code injection
2012-05-18 18:55:00
cvelist
cvelist
CVE-2012-2406
2012-05-18 18:00:00
nessus
nessus
RealPlayer for Windows < 15.0.4.53 Multiple Vulnerabilities
2012-05-17 00:00:00
Real Networks RealPlayer < 15.0.4.53 Multiple Vulnerabilities
2012-05-17 00:00:00
openvas
openvas
RealNetworks RealPlayer MP4 File Handling Denial of Service Vulnerability (Windows)
2012-04-02 00:00:00
RealNetworks RealPlayer MP4 File Handling Denial of Service Vulnerability - Windows
2012-04-02 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.4%

JSON
Related for NVD:CVE-2012-2406
cve1prion1cvelist1nessus2openvas2