First published: Tue Aug 27 2013(Updated: )
RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
RealPlayer | <=16.0.2.32 | |
RealPlayer | =10.0 | |
RealPlayer | =10.5 | |
RealPlayer | =11.0 | |
RealPlayer | =11.0.1 | |
RealPlayer | =11.0.2 | |
RealPlayer | =11.0.2.1744 | |
RealPlayer | =11.0.2.2315 | |
RealPlayer | =11.0.3 | |
RealPlayer | =11.0.4 | |
RealPlayer | =11.0.5 | |
RealPlayer | =11.1 | |
RealPlayer | =11.1.3 | |
RealPlayer | =11_build_6.0.14.748 | |
RealPlayer | =12.0.0.1444 | |
RealPlayer | =12.0.0.1548 | |
RealPlayer | =14.0.0 | |
RealPlayer | =14.0.1 | |
RealPlayer | =14.0.1.609 | |
RealPlayer | =14.0.2 | |
RealPlayer | =14.0.3 | |
RealPlayer | =14.0.4 | |
RealPlayer | =14.0.5 | |
RealPlayer | =15.0.0 | |
RealPlayer | =15.0.4 | |
RealPlayer | =15.0.4.43 | |
RealPlayer | =15.0.5.109 | |
RealPlayer | =15.0.6.14 | |
RealPlayer | =15.02.71 | |
RealPlayer | =16.0.0 | |
RealPlayer | =16.0.0.282 | |
RealPlayer | =16.0.1.18 | |
RealNetworks RealPlayer SP | =1.0.0 | |
RealNetworks RealPlayer SP | =1.0.1 | |
RealNetworks RealPlayer SP | =1.0.2 | |
RealNetworks RealPlayer SP | =1.0.5 | |
RealNetworks RealPlayer SP | =1.1 | |
RealNetworks RealPlayer SP | =1.1.1 | |
RealNetworks RealPlayer SP | =1.1.2 | |
RealNetworks RealPlayer SP | =1.1.3 | |
RealNetworks RealPlayer SP | =1.1.4 | |
RealNetworks RealPlayer SP | =1.1.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-4974 is classified as critical due to the potential for remote code execution and denial of service.
To mitigate CVE-2013-4974, update RealPlayer to version 16.0.3.51 or later.
CVE-2013-4974 can be exploited through maliciously crafted RealMedia files leading to memory corruption or arbitrary code execution.
CVE-2013-4974 affects RealPlayer versions prior to 16.0.3.51 and RealPlayer SP versions up to 1.1.5.
Disabling the playback of RealMedia files can serve as a temporary workaround until the software is updated.