2012-12-18

2012-12-19

2012-12-20

All (2) Critical (2) Medium (13) Low (3)

CVE-2012-5691 Dec 19, 11:55 CRITICAL POC THREAT Emergency

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 76.9%.

RCE Buffer Overflow Realplayer Realplayer Sp Realnetworks

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

76.9%

Threat

5.7

CVE-2012-5690 Dec 19, 11:55 CRITICAL Act Now

RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Code Injection Realplayer Realplayer Sp Realnetworks

NVD

CVSS 2.0

9.3

EPSS

3.4%