Lucene search

K
nvd[email protected]NVD:CVE-2012-4987
HistoryNov 04, 2012 - 3:55 p.m.

CVE-2012-4987

2012-11-0415:55:01
CWE-119
web.nvd.nist.gov
5

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.202

Percentile

96.4%

Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature.

Affected configurations

Nvd
Node
realnetworksrealplayerMatch15.0.5.109
VendorProductVersionCPE
realnetworksrealplayer15.0.5.109cpe:2.3:a:realnetworks:realplayer:15.0.5.109:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.202

Percentile

96.4%

Related for NVD:CVE-2012-4987