| |
Vulnerability CVE-2012-0926
Published: 2012-02-08 Modified: 2012-02-13
| Description: |
The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream. |
See advisories in our WLB2 database: | Topic | Author | Date |
High |
| ZDI | 08.06.2012 |
Type:
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
9.3/10 |
10/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Complete |
Complete |
Complete |
References: |
http://service.real.com/realplayer/security/02062012_player/en/
http://secunia.com/advisories/47896
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
