9.3

CVE-2012-2406

RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.

Data is provided by the National Vulnerability Database (NVD)
RealnetworksRealplayer Version <= 15.0.4
RealnetworksRealplayer Version4
RealnetworksRealplayer Version5
RealnetworksRealplayer Version6
RealnetworksRealplayer Version7
RealnetworksRealplayer Version8
RealnetworksRealplayer Version10.0
RealnetworksRealplayer Version10.5
RealnetworksRealplayer Version11.0
RealnetworksRealplayer Version11.0.1
RealnetworksRealplayer Version11.0.2
RealnetworksRealplayer Version11.0.2.1744
RealnetworksRealplayer Version11.0.2.2315
RealnetworksRealplayer Version11.0.3
RealnetworksRealplayer Version11.0.4
RealnetworksRealplayer Version11.0.5
RealnetworksRealplayer Version11.1
RealnetworksRealplayer Version11.1.3
RealnetworksRealplayer Version11_build_6.0.14.748
RealnetworksRealplayer Version12.0.0.1444
RealnetworksRealplayer Version12.0.0.1548
RealnetworksRealplayer Version14.0.0
RealnetworksRealplayer Version14.0.1
RealnetworksRealplayer Version14.0.1.609
RealnetworksRealplayer Version14.0.2
RealnetworksRealplayer Version14.0.3
RealnetworksRealplayer Version14.0.4
RealnetworksRealplayer Version14.0.5
RealnetworksRealplayer Version15.0.0
RealnetworksRealplayer Version15.0.1.13
RealnetworksRealplayer Version15.02.71
RealnetworksRealplayer Sp Version1.0.0
RealnetworksRealplayer Sp Version1.0.1
RealnetworksRealplayer Sp Version1.0.2
RealnetworksRealplayer Sp Version1.0.5
RealnetworksRealplayer Sp Version1.1
RealnetworksRealplayer Sp Version1.1.1
RealnetworksRealplayer Sp Version1.1.2
RealnetworksRealplayer Sp Version1.1.3
RealnetworksRealplayer Sp Version1.1.4
RealnetworksRealplayer Sp Version1.1.5
RealnetworksRealplayer Sp Version1.0.0
RealnetworksRealplayer Sp Version1.0.1
RealnetworksRealplayer Sp Version1.0.2
RealnetworksRealplayer Sp Version1.0.5
RealnetworksRealplayer Sp Version1.1
RealnetworksRealplayer Sp Version1.1.1
RealnetworksRealplayer Sp Version1.1.2
RealnetworksRealplayer Sp Version1.1.3
RealnetworksRealplayer Sp Version1.1.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.32% 0.878
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C