CVE-2013-3299: Input Validation
Published Jul 6, 2013
·Updated
RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.
Affected Software
39 affected components
RealNetworks RealPlayer<=16.0.2.32
RealNetworks RealPlayer=4
RealNetworks RealPlayer=5
RealNetworks RealPlayer=6
RealNetworks RealPlayer=7
RealNetworks RealPlayer=8
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=11.0
RealNetworks RealPlayer=11.0.1
RealNetworks RealPlayer=11.0.2
RealNetworks RealPlayer=11.0.2.1744
RealNetworks RealPlayer=11.0.2.2315
RealNetworks RealPlayer=11.0.3
RealNetworks RealPlayer=11.0.4
RealNetworks RealPlayer=11.0.5
RealNetworks RealPlayer=11.1
RealNetworks RealPlayer=11.1.3
RealNetworks RealPlayer=11_build_6.0.14.748
RealNetworks RealPlayer=12.0.0.1444
RealNetworks RealPlayer=12.0.0.1548
RealNetworks RealPlayer=14.0.0
RealNetworks RealPlayer=14.0.1
RealNetworks RealPlayer=14.0.1.609
RealNetworks RealPlayer=14.0.2
RealNetworks RealPlayer=14.0.3
RealNetworks RealPlayer=14.0.4
RealNetworks RealPlayer=14.0.5
RealNetworks RealPlayer=15.0.0
RealNetworks RealPlayer=15.0.1.13
RealNetworks RealPlayer=15.0.2.72
RealNetworks RealPlayer=15.0.3.37
RealNetworks RealPlayer=15.0.4
RealNetworks RealPlayer=15.0.4.43
RealNetworks RealPlayer=15.0.5.109
RealNetworks RealPlayer=15.0.6.14
RealNetworks RealPlayer=15.02.71
RealNetworks RealPlayer=16.0.0
RealNetworks RealPlayer=16.0.0.282
Event History
Jul 6, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
Is there a workaround for CVE-2013-3299?
Currently, the best workaround for CVE-2013-3299 is to avoid opening untrusted HTML documents that may contain malicious JavaScript.