4.3

CVE-2013-3299

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.

Data is provided by the National Vulnerability Database (NVD)
Realnetworks ≫ Realplayer Version <= 16.0.2.32
Realnetworks ≫ Realplayer Version4
Realnetworks ≫ Realplayer Version5
Realnetworks ≫ Realplayer Version6
Realnetworks ≫ Realplayer Version7
Realnetworks ≫ Realplayer Version8
Realnetworks ≫ Realplayer Version10.0
Realnetworks ≫ Realplayer Version10.5
Realnetworks ≫ Realplayer Version11.0
Realnetworks ≫ Realplayer Version11.0.1
Realnetworks ≫ Realplayer Version11.0.2
Realnetworks ≫ Realplayer Version11.0.2.1744
Realnetworks ≫ Realplayer Version11.0.2.2315
Realnetworks ≫ Realplayer Version11.0.3
Realnetworks ≫ Realplayer Version11.0.4
Realnetworks ≫ Realplayer Version11.0.5
Realnetworks ≫ Realplayer Version11.1
Realnetworks ≫ Realplayer Version11.1.3
Realnetworks ≫ Realplayer Version11_build_6.0.14.748
Realnetworks ≫ Realplayer Version12.0.0.1444
Realnetworks ≫ Realplayer Version12.0.0.1548
Realnetworks ≫ Realplayer Version14.0.0
Realnetworks ≫ Realplayer Version14.0.1
Realnetworks ≫ Realplayer Version14.0.1.609
Realnetworks ≫ Realplayer Version14.0.2
Realnetworks ≫ Realplayer Version14.0.3
Realnetworks ≫ Realplayer Version14.0.4
Realnetworks ≫ Realplayer Version14.0.5
Realnetworks ≫ Realplayer Version15.0.0
Realnetworks ≫ Realplayer Version15.0.1.13
Realnetworks ≫ Realplayer Version15.0.2.72
Realnetworks ≫ Realplayer Version15.0.3.37
Realnetworks ≫ Realplayer Version15.0.4
Realnetworks ≫ Realplayer Version15.0.4.43
Realnetworks ≫ Realplayer Version15.0.5.109
Realnetworks ≫ Realplayer Version15.0.6.14
Realnetworks ≫ Realplayer Version15.02.71
Realnetworks ≫ Realplayer Version16.0.0
Realnetworks ≫ Realplayer Version16.0.0.282
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.22% 0.906
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.