Realnetworks : Security Vulnerabilities

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2013-7260	119	1	Exec Code Overflow	2014-01-03	2020-05-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.
2	CVE-2012-4987	119	1	Exec Code Overflow	2012-11-04	2017-08-29	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature.
3	CVE-2012-1904	119	1	DoS Overflow Mem. Corr.	2012-03-28	2012-08-25	4.3	None	Remote	Medium	Not required	None	None	Partial
mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.
4	CVE-2011-1525	119	1	Exec Code Overflow	2011-04-06	2018-10-09	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
5	CVE-2010-3749	94	1		2010-10-19	2011-01-26	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a " (double quote) in an argument to the RecordClip method, aka "parameter injection."
6	CVE-2009-2534	20	1	DoS	2009-07-20	2018-10-10	5.0	None	Remote	Low	Not required	None	None	Partial
RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.
7	CVE-2009-2533	20	1	DoS	2009-07-20	2018-10-10	5.0	None	Remote	Low	Not required	None	None	Partial
rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of service (daemon exit) via multiple RTSP SET_PARAMETER requests with empty DataConvertBuffer headers.
8	CVE-2006-6759		1	DoS	2006-12-27	2017-10-19	5.0	None	Remote	Low	Not required	None	None	Partial
A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer crash) by invoking the RealPlayer.Initialize method with certain arguments.

Total number of vulnerabilities : 8 Page : 1 (This Page)