Lucene search
HistoryJan 03, 2014 - 8:55 p.m.
CVE-2013-7260
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.965 High
EPSS
Percentile
99.6%
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.
Affected configurations
Node
realnetworksrealplayerRangeβ€17.0.4.60
ORrealnetworksrealplayerMatch2.1.2enterprise
ORrealnetworksrealplayerMatch2.1.3enterprise
ORrealnetworksrealplayerMatch2.1.4enterprise
ORrealnetworksrealplayerMatch4
ORrealnetworksrealplayerMatch5
ORrealnetworksrealplayerMatch6
ORrealnetworksrealplayerMatch7
ORrealnetworksrealplayerMatch8
ORrealnetworksrealplayerMatch10.0
ORrealnetworksrealplayerMatch10.5
ORrealnetworksrealplayerMatch11.0
ORrealnetworksrealplayerMatch11.0.1
ORrealnetworksrealplayerMatch11.0.2
ORrealnetworksrealplayerMatch11.0.2.1744
ORrealnetworksrealplayerMatch11.0.2.2315
ORrealnetworksrealplayerMatch11.0.3
ORrealnetworksrealplayerMatch11.0.4
ORrealnetworksrealplayerMatch11.0.5
ORrealnetworksrealplayerMatch11.1
ORrealnetworksrealplayerMatch11.1.3
ORrealnetworksrealplayerMatch11_build_6.0.14.748
ORrealnetworksrealplayerMatch12.0.0.1444
ORrealnetworksrealplayerMatch12.0.0.1548
ORrealnetworksrealplayerMatch14.0.0
ORrealnetworksrealplayerMatch14.0.1
ORrealnetworksrealplayerMatch14.0.1.609
ORrealnetworksrealplayerMatch14.0.2
ORrealnetworksrealplayerMatch14.0.3
ORrealnetworksrealplayerMatch14.0.4
ORrealnetworksrealplayerMatch14.0.5
ORrealnetworksrealplayerMatch15.0.0
ORrealnetworksrealplayerMatch15.0.4
ORrealnetworksrealplayerMatch15.0.4.43
ORrealnetworksrealplayerMatch15.0.5.109
ORrealnetworksrealplayerMatch15.0.6.14
ORrealnetworksrealplayerMatch15.02.71
ORrealnetworksrealplayerMatch16.0.0
ORrealnetworksrealplayerMatch16.0.0.282
ORrealnetworksrealplayerMatch16.0.1.18
ORrealnetworksrealplayerMatch16.0.2.32
ORrealnetworksrealplayerMatch16.0.3.51
Node
realnetworksrealplayerMatch10.010.0.0.305mac
ORrealnetworksrealplayerMatch10.010.0.0.331mac
ORrealnetworksrealplayerMatch10.010.0.0.352mac
ORrealnetworksrealplayerMatch10.110.0.0._481mac
ORrealnetworksrealplayerMatch10.110.0.0.396mac
ORrealnetworksrealplayerMatch10.110.0.0.412mac
ORrealnetworksrealplayerMatch12.0.0.1701mac
ORrealnetworksrealplayerMatch12.0.1.1737---macos
Related
cve
cve
CVE-2013-7260
2014-01-03 20:55:06
CVE-2013-6877
2013-12-19 22:55:04
cvelist
cvelist
CVE-2013-7260
2014-01-03 20:00:00
CVE-2013-6877
2013-12-19 22:00:00
prion
prion
Stack overflow
2014-01-03 20:55:00
Heap overflow
2013-12-19 22:55:00
nvd
nvd
CVE-2013-6877
2013-12-19 22:55:04
openvas
openvas
RealNetworks RealPlayer Buffer Overflow Vulnerability (Dec 2013) - Windows
2013-12-26 00:00:00
nessus
nessus
RealPlayer for Windows < 17.0.4.61 RMP Buffer Overflow
2013-12-31 00:00:00
saint
saint
RealPlayer RMP File Version Attribute Buffer Overflow
2013-12-27 00:00:00
RealPlayer RMP File Version Attribute Buffer Overflow
2013-12-27 00:00:00
RealPlayer RMP File Version Attribute Buffer Overflow
2013-12-27 00:00:00
securityvulns
securityvulns
CORE-2013-0903 - RealPlayer Heap-based Buffer Overflow Vulnerability
2013-12-24 00:00:00
RealPlayer buffer overflow
2013-12-24 00:00:00
coresecurity
coresecurity
RealPlayer Heap-Based Buffer Overflow Vulnerability
2013-12-17 00:00:00
checkpoint_advisories
checkpoint_advisories
RealNetworks RealPlayer RMP File Heap Buffer Overflow (CVE-2013-6877)
2014-01-13 00:00:00
RealNetworks RealPlayer RMP File Stack Buffer Overflow (CVE-2013-6877)
2014-03-16 00:00:00
zdt
zdt
RealNetworks RealPlayer 16.0.3.51/16.0.2.32 - (.rmp) Version Attribute Buffer Overflow
2013-12-24 00:00:00
RealPlayer Heap-based Buffer Overflow Vulnerability
2013-12-19 00:00:00
seebug
seebug
RealPlayer 'RMP'ζδ»Άε€ηθΏη¨ε ηΌε²εΊζΊ’εΊζΌζ΄
2013-12-18 00:00:00
packetstorm
packetstorm
RealPlayer Heap-Based Buffer Overflow
2013-12-20 00:00:00
RealNetworks RealPlayer 16 Buffer Overflow
2013-12-25 00:00:00
RealNetworks RealPlayer Version Attribute Buffer Overflow
2013-12-26 00:00:00
cert
cert
RealPlayer version 16.0.3.51 contains a buffer overflow vulnerability
2013-12-30 00:00:00
exploitpack
exploitpack
exploitdb
exploitdb
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.965 High
EPSS
Percentile
99.6%
Related for NVD:CVE-2013-7260