Detections
Analytics
RealPlayer for Windows < 15.0.4.53 Multiple Vulnerabilities
high Nessus Plugin ID 59173
Language:
Synopsis
A multimedia application on the remote Windows host is affected by multiple vulnerabilities.Description
According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.4.53. As such, it is affected by multiple vulnerabilities :- A memory corruption error exists related to the handling of 'MP4' files. (CVE-2012-1904)
- An unspecified error exists related to the parsing of 'RealMedia ASMRuleBook' files that can lead to remote arbitrary code execution. (CVE-2012-2406)
- A buffer overflow exists related to the parsing of 'RealJukebox Media' content. (CVE-2012-2411)
Solution
Upgrade to RealPlayer 15.0.4.53 or later.See Also
http://www.nessus.org/u?ad561c7a
http://service.real.com/realplayer/security/05152012_player/en/
Plugin Details
Severity: High
ID: 59173
File Name: realplayer_15_0_4_53.nasl
Version: 1.7
Type: local
Agent: windows
Family: Windows
Published: 5/17/2012
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:realnetworks:realplayer
Required KB Items: SMB/RealPlayer/Product, SMB/RealPlayer/Build
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/15/2012
Vulnerability Publication Date: 3/24/2012