Detections
Analytics
Real Networks RealPlayer < 16.0.0.282 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 6652
Synopsis
The remote host is running a multimedia application that is vulnerable to multiple vulnerabilities.Description
The remote host is running RealPlayer application.RealPlayer builds earlier than 16.0.0.282 are potentially affected by multiple vulnerabilities :
- An error exists related to 'RealAudio' handling and invalid pointers that can allow arbitrary code execution. (CVE-2012-5690)
- An error exists related to 'RealMedia' handling that can allow a buffer overflow leading to arbitrary code execution. (CVE-2012-5691)
Solution
Upgrade to RealPlayer 16.0.0.282 or later.See Also
http://service.real.com/realplayer/security/12142012_player/en
Plugin Details
Severity: High
ID: 6652
Family: Web Clients
Published: 1/3/2013
Updated: 3/6/2019
Nessus ID: 63289
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:realnetworks:realplayer
Patch Publication Date: 12/14/2012
Vulnerability Publication Date: 12/14/2012
Exploitable With
Metasploit (RealPlayer RealMedia File Handling Buffer Overflow)
Reference Information
CVE: CVE-2012-5690, CVE-2012-5691
BID: 56956