2012-12-18

2012-12-19

2012-12-20

All (2) Critical (2) Medium (13) Low (3)

CVE-2012-5691 CRITICAL POC THREAT Emergency

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 76.9%.

Buffer Overflow RCE Realplayer Realplayer Sp

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

76.9%

Threat

5.7

CVE-2012-5690 CRITICAL Act Now

RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Code Injection RCE Realplayer Realplayer Sp

NVD

CVSS 2.0

9.3

EPSS

3.4%