4.3

CVE-2013-3299

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Realnetworks ≫ Realplayer Version <= 16.0.2.32
Realnetworks ≫ Realplayer Version 4
Realnetworks ≫ Realplayer Version 5
Realnetworks ≫ Realplayer Version 6
Realnetworks ≫ Realplayer Version 7
Realnetworks ≫ Realplayer Version 8
Realnetworks ≫ Realplayer Version 10.0
Realnetworks ≫ Realplayer Version 10.5
Realnetworks ≫ Realplayer Version 11.0
Realnetworks ≫ Realplayer Version 11.0.1
Realnetworks ≫ Realplayer Version 11.0.2
Realnetworks ≫ Realplayer Version 11.0.2.1744
Realnetworks ≫ Realplayer Version 11.0.2.2315
Realnetworks ≫ Realplayer Version 11.0.3
Realnetworks ≫ Realplayer Version 11.0.4
Realnetworks ≫ Realplayer Version 11.0.5
Realnetworks ≫ Realplayer Version 11.1
Realnetworks ≫ Realplayer Version 11.1.3
Realnetworks ≫ Realplayer Version 11_build_6.0.14.748
Realnetworks ≫ Realplayer Version 12.0.0.1444
Realnetworks ≫ Realplayer Version 12.0.0.1548
Realnetworks ≫ Realplayer Version 14.0.0
Realnetworks ≫ Realplayer Version 14.0.1
Realnetworks ≫ Realplayer Version 14.0.1.609
Realnetworks ≫ Realplayer Version 14.0.2
Realnetworks ≫ Realplayer Version 14.0.3
Realnetworks ≫ Realplayer Version 14.0.4
Realnetworks ≫ Realplayer Version 14.0.5
Realnetworks ≫ Realplayer Version 15.0.0
Realnetworks ≫ Realplayer Version 15.0.1.13
Realnetworks ≫ Realplayer Version 15.0.2.72
Realnetworks ≫ Realplayer Version 15.0.3.37
Realnetworks ≫ Realplayer Version 15.0.4
Realnetworks ≫ Realplayer Version 15.0.4.43
Realnetworks ≫ Realplayer Version 15.0.5.109
Realnetworks ≫ Realplayer Version 15.0.6.14
Realnetworks ≫ Realplayer Version 15.02.71
Realnetworks ≫ Realplayer Version 16.0.0
Realnetworks ≫ Realplayer Version 16.0.0.282
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.23% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://seclists.org/bugtraq/2013/Jul/18