7.5
CVE-2013-7260
- EPSS 78.26%
- Veröffentlicht 03.01.2014 20:55:06
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Realnetworks ≫ Realplayer Version <= 17.0.4.60
Realnetworks ≫ Realplayer Version2.1.2 Editionenterprise
Realnetworks ≫ Realplayer Version2.1.3 Editionenterprise
Realnetworks ≫ Realplayer Version2.1.4 Editionenterprise
Realnetworks ≫ Realplayer Version4
Realnetworks ≫ Realplayer Version5
Realnetworks ≫ Realplayer Version6
Realnetworks ≫ Realplayer Version7
Realnetworks ≫ Realplayer Version8
Realnetworks ≫ Realplayer Version10.0
Realnetworks ≫ Realplayer Version10.5
Realnetworks ≫ Realplayer Version11.0
Realnetworks ≫ Realplayer Version11.0.1
Realnetworks ≫ Realplayer Version11.0.2
Realnetworks ≫ Realplayer Version11.0.2.1744
Realnetworks ≫ Realplayer Version11.0.2.2315
Realnetworks ≫ Realplayer Version11.0.3
Realnetworks ≫ Realplayer Version11.0.4
Realnetworks ≫ Realplayer Version11.0.5
Realnetworks ≫ Realplayer Version11.1
Realnetworks ≫ Realplayer Version11.1.3
Realnetworks ≫ Realplayer Version11_build_6.0.14.748
Realnetworks ≫ Realplayer Version12.0.0.1444
Realnetworks ≫ Realplayer Version12.0.0.1548
Realnetworks ≫ Realplayer Version14.0.0
Realnetworks ≫ Realplayer Version14.0.1
Realnetworks ≫ Realplayer Version14.0.1.609
Realnetworks ≫ Realplayer Version14.0.2
Realnetworks ≫ Realplayer Version14.0.3
Realnetworks ≫ Realplayer Version14.0.4
Realnetworks ≫ Realplayer Version14.0.5
Realnetworks ≫ Realplayer Version15.0.0
Realnetworks ≫ Realplayer Version15.0.4
Realnetworks ≫ Realplayer Version15.0.4.43
Realnetworks ≫ Realplayer Version15.0.5.109
Realnetworks ≫ Realplayer Version15.0.6.14
Realnetworks ≫ Realplayer Version15.02.71
Realnetworks ≫ Realplayer Version16.0.0
Realnetworks ≫ Realplayer Version16.0.0.282
Realnetworks ≫ Realplayer Version16.0.1.18
Realnetworks ≫ Realplayer Version16.0.2.32
Realnetworks ≫ Realplayer Version16.0.3.51
Realnetworks ≫ Realplayer Version10.0 Update10.0.0.305 Editionmac
Realnetworks ≫ Realplayer Version10.0 Update10.0.0.331 Editionmac
Realnetworks ≫ Realplayer Version10.0 Update10.0.0.352 Editionmac
Realnetworks ≫ Realplayer Version10.1 Update10.0.0._481 Editionmac
Realnetworks ≫ Realplayer Version10.1 Update10.0.0.396 Editionmac
Realnetworks ≫ Realplayer Version10.1 Update10.0.0.412 Editionmac
Realnetworks ≫ Realplayer Version12.0.0.1701 Editionmac
Realnetworks ≫ Realplayer Version12.0.1.1737 Update- Edition- SwEdition- SwPlatformmacos
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 78.26% | 0.989 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.