Detections
Analytics
RealPlayer for Windows < 16.0.3.51 Remote Buffer Overflow and Memory Corruption Vulnerabilities
medium Nessus Network Monitor Plugin ID 8000
Synopsis
The remote host is running a version of RealPlayer multimedia application that may be vulnerable to a buffer overflow as well as a remote memory corruption.Description
RealPlayer builds earlier than 16.0.3.51 are potentially affected by the following vulnerabilities :- A stack buffer overflow when handling filenames.(CVE-2013-4973)
- Memory corruption vulnerability when parsing a malformed RealMedia file. (CVE-2013-4974)
Solution
Upgrade to RealPlayer 16.0.3.51 or later on your Windows platform.See Also
http://service.real.com/realplayer/security/08232013_player/en
Plugin Details
Severity: Medium
ID: 8000
Family: Web Clients
Published: 8/26/2013
Updated: 3/6/2019
Nessus ID: 69472
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 4.9
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:realnetworks:realplayer
Patch Publication Date: 8/23/2013
Vulnerability Publication Date: 8/23/2013
Reference Information
CVE: CVE-2013-4973, CVE-2013-4974