CVE-2014-3444

2014-05-2011:13:38

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.031

Percentile

91.1%

JSON

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.

Affected configurations

Nvd

Node

realnetworksrealplayerRange≤16.0.3.51

realnetworksrealplayerMatch16.0.0

realnetworksrealplayerMatch16.0.0.282

realnetworksrealplayerMatch16.0.1.18

realnetworksrealplayerMatch16.0.2.32

VendorProductVersionCPE
realnetworksrealplayer*cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*
realnetworksrealplayer16.0.0cpe:2.3:a:realnetworks:realplayer:16.0.0:*:*:*:*:*:*:*
realnetworksrealplayer16.0.0.282cpe:2.3:a:realnetworks:realplayer:16.0.0.282:*:*:*:*:*:*:*
realnetworksrealplayer16.0.1.18cpe:2.3:a:realnetworks:realplayer:16.0.1.18:*:*:*:*:*:*:*
realnetworksrealplayer16.0.2.32cpe:2.3:a:realnetworks:realplayer:16.0.2.32:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	realplayer	*	cpe:2.3:a:realnetworks:realplayer::::::::
realnetworks	realplayer	16.0.0	cpe:2.3:a:realnetworks:realplayer:16.0.0:::::::*
realnetworks	realplayer	16.0.0.282	cpe:2.3:a:realnetworks:realplayer:16.0.0.282:::::::*
realnetworks	realplayer	16.0.1.18	cpe:2.3:a:realnetworks:realplayer:16.0.1.18:::::::*
realnetworks	realplayer	16.0.2.32	cpe:2.3:a:realnetworks:realplayer:16.0.2.32:::::::*