Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-7260


Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.


Published

2014-01-03T20:55:06.383

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application realnetworks realplayer ≤ 17.0.4.60 Yes
Application realnetworks realplayer 2.1.2 Yes
Application realnetworks realplayer 2.1.3 Yes
Application realnetworks realplayer 2.1.4 Yes
Application realnetworks realplayer 4 Yes
Application realnetworks realplayer 5 Yes
Application realnetworks realplayer 6 Yes
Application realnetworks realplayer 7 Yes
Application realnetworks realplayer 8 Yes
Application realnetworks realplayer 10.0 Yes
Application realnetworks realplayer 10.5 Yes
Application realnetworks realplayer 11.0 Yes
Application realnetworks realplayer 11.0.1 Yes
Application realnetworks realplayer 11.0.2 Yes
Application realnetworks realplayer 11.0.2.1744 Yes
Application realnetworks realplayer 11.0.2.2315 Yes
Application realnetworks realplayer 11.0.3 Yes
Application realnetworks realplayer 11.0.4 Yes
Application realnetworks realplayer 11.0.5 Yes
Application realnetworks realplayer 11.1 Yes
Application realnetworks realplayer 11.1.3 Yes
Application realnetworks realplayer 11_build_6.0.14.748 Yes
Application realnetworks realplayer 12.0.0.1444 Yes
Application realnetworks realplayer 12.0.0.1548 Yes
Application realnetworks realplayer 14.0.0 Yes
Application realnetworks realplayer 14.0.1 Yes
Application realnetworks realplayer 14.0.1.609 Yes
Application realnetworks realplayer 14.0.2 Yes
Application realnetworks realplayer 14.0.3 Yes
Application realnetworks realplayer 14.0.4 Yes
Application realnetworks realplayer 14.0.5 Yes
Application realnetworks realplayer 15.0.0 Yes
Application realnetworks realplayer 15.0.4 Yes
Application realnetworks realplayer 15.0.4.43 Yes
Application realnetworks realplayer 15.0.5.109 Yes
Application realnetworks realplayer 15.0.6.14 Yes
Application realnetworks realplayer 15.02.71 Yes
Application realnetworks realplayer 16.0.0 Yes
Application realnetworks realplayer 16.0.0.282 Yes
Application realnetworks realplayer 16.0.1.18 Yes
Application realnetworks realplayer 16.0.2.32 Yes
Application realnetworks realplayer 16.0.3.51 Yes
Application realnetworks realplayer 10.0 Yes
Application realnetworks realplayer 10.0 Yes
Application realnetworks realplayer 10.0 Yes
Application realnetworks realplayer 10.1 Yes
Application realnetworks realplayer 10.1 Yes
Application realnetworks realplayer 10.1 Yes
Application realnetworks realplayer 12.0.0.1701 Yes
Application realnetworks realplayer 12.0.1.1737 Yes

References