Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)

Information

Severity

Severity

Critical

Family

Family

General

CVSSv2 Base

CVSSv2 Base

10.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

12 years ago

Modified

Modified

5 years ago

Summary

This host is installed with RealPlayer which is prone to multiple vulnerabilities.

Insight

Insight

Multiple flaws are due to, - Unspecified errors in RV20, RV10, RV30, ATRC and AAC codec, allows attackers to execute arbitrary code via unspecified vectors. - An unspecified error related to RealVideo rendering, related to MP4 video dimensions can be exploited to corrupt memory. - An unspecified error exists when parsing of QCELP streams, MP4 headers, MP4 files and the channel within the Cook codec and MLTI chunk length within IVR files. - An unspecified error exists related to sample size when parsing RealAudio files. - An unspecified error exists when handling RTSP SETUP requests.

Affected Software

Affected Software

RealPlayer versions prior to 15.0.0

Solution

Solution

Upgrade to RealPlayer version 15.0.0 or later