Realnetworks Vulnérabilités

Chronologie

Taper

Produit

RealNetworks RealPlayer176
RealNetworks Helix Universal Server8
RealNetworks Helix Server8
RealNetworks RealOne Player6
RealNetworks RealServer6

Contre-mesures

Official Fix100
Temporary Fix0
Workaround2
Unavailable4
Not Defined122

Exploitabilité

High4
Functional0
Proof-of-Concept86
Unproven4
Not Defined134

Vecteur d'accès

Not Defined0
Physical0
Local8
Adjacent2
Network218

Authentification

Not Defined0
High0
Low18
None210

Interaction de l'utilisateur

Not Defined0
Required18
None210

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤56
≤622
≤712
≤854
≤94
≤10126

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤518
≤616
≤740
≤820
≤928
≤10102

VulDB

≤10
≤20
≤30
≤46
≤54
≤622
≤712
≤854
≤94
≤10126

NVD

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k14
<10k28
<25k28
<50k158
<100k0
≥100k0

Exploiter aujourd'hui

<1k142
<2k10
<5k6
<10k42
<25k28
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (20): GameHouse (1), Helix DNA Server (3), Helix Dna Server (1), Helix Player (2), Helix Server (15), Helix Universal Server (5), RealArcade (1), RealArcade Installer (2), RealJukebox 2 (2), RealOne (1), RealOne Player (7), RealPlayer (176), RealPlayer Enterprise (1), RealPlayer SP (3), RealServer (6), RealServer G2 (1), RealSystem G2 Server (1), RealSystem Proxy (1), RealSystem Server (2), realone player (1)

Link to Vendor Website: https://www.realnetworks.com/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
06/06/20226.36.1RealNetworks RealPlayer UNC Share Pathname elévation de privilègesMultimedia Player SoftwareNot DefinedNot Defined0.002810.00CVE-2022-32291
03/06/20223.53.4RealNetworks RealPlayer G2 Control cross site scriptingMultimedia Player SoftwareNot DefinedNot Defined0.003730.00CVE-2022-32269
03/06/20223.53.4RealNetworks RealPlayer DCP URI cross site scriptingMultimedia Player SoftwareNot DefinedNot Defined0.004060.00CVE-2022-32271
03/06/20226.36.1RealNetworks RealPlayer Import directory traversalMultimedia Player SoftwareNot DefinedNot Defined0.005670.02CVE-2022-32270
29/05/20174.44.4RealNetworks RealPlayer MP4 File dénie de serviceMultimedia Player SoftwareNot DefinedNot Defined0.001170.02CVE-2017-9302
28/10/20165.55.2RealNetworks RealPlayer VRAT Chunk qcpfformat.dll dénie de serviceMultimedia Player SoftwareProof-of-ConceptNot Defined0.000990.02CVE-2016-9018
12/01/20158.48.4RealNetworks RealArcade Installer Privileges DDRAW.DLL elévation de privilègesInconnueNot DefinedNot Defined0.001200.00CVE-2013-2604
12/01/201510.010.0RealNetworks RealArcade Installer ActiveX Control InstallerDlg.dll buffer overflowInconnueNot DefinedNot Defined0.043400.00CVE-2013-2603
04/07/20147.36.4RealNetworks RealPlayer MP4 buffer overflowMultimedia Player SoftwareUnprovenOfficial Fix0.036750.02CVE-2014-3113
16/05/20147.36.9RealNetworks RealPlayer 3GP File elévation de privilègesMultimedia Player SoftwareProof-of-ConceptUnavailable0.031240.00CVE-2014-3444
20/12/201310.09.5RealNetworks RealPlayer RMP File buffer overflowMultimedia Player SoftwareHighOfficial Fix0.963870.00CVE-2013-7260
17/12/201310.09.4RealNetworks RealPlayer RMP File buffer overflowMultimedia Player SoftwareProof-of-ConceptNot Defined0.755010.00CVE-2013-6877
23/08/201310.09.5RealNetworks RealPlayer Filename buffer overflowMultimedia Player SoftwareNot DefinedOfficial Fix0.059510.00CVE-2013-4973
23/08/201310.09.5RealNetworks RealPlayer RealMedia File buffer overflowMultimedia Player SoftwareNot DefinedOfficial Fix0.007480.00CVE-2013-4974
02/07/20137.56.7RealNetworks RealPlayer HTML elévation de privilègesMultimedia Player SoftwareProof-of-ConceptOfficial Fix0.003000.00CVE-2013-3299
15/03/201310.09.5RealNetworks RealPlayer User Input Sanitizer buffer overflowMultimedia Player SoftwareNot DefinedOfficial Fix0.001020.00CVE-2013-1750
14/12/20129.98.9RealNetworks RealPlayer RealAudio File elévation de privilègesMultimedia Player SoftwareProof-of-ConceptOfficial Fix0.000940.00CVE-2012-5690
14/12/20129.99.2RealNetworks RealPlayer RealMedia File buffer overflowMultimedia Player SoftwareHighOfficial Fix0.846130.00CVE-2012-5691
12/09/20127.37.3RealNetworks RealPlayer buffer overflowMultimedia Player SoftwareNot DefinedNot Defined0.002020.00CVE-2012-2408
12/09/20127.37.3RealNetworks RealPlayer buffer overflowMultimedia Player SoftwareNot DefinedNot Defined0.002800.00CVE-2012-2407
07/09/20128.48.4RealNetworks RealPlayer rio500.dll elévation de privilègesMultimedia Player SoftwareNot DefinedNot Defined0.000820.00CVE-2010-5228
07/09/201210.08.7RealNetworks RealPlayer buffer overflowMultimedia Player SoftwareProof-of-ConceptOfficial Fix0.002800.00CVE-2012-2409
07/09/201210.08.7RealNetworks RealPlayer buffer overflowMultimedia Player SoftwareProof-of-ConceptOfficial Fix0.002170.00CVE-2012-2410
07/09/20127.56.5RealNetworks RealPlayer RealAudio Codec dénie de serviceMultimedia Player SoftwareProof-of-ConceptOfficial Fix0.002870.00CVE-2012-3234
15/05/20129.98.6RealNetworks RealPlayer RealJukebox Media Parser buffer overflowMultimedia Player SoftwareProof-of-ConceptOfficial Fix0.080390.00CVE-2012-2411

202 plus d'entrées ne sont pas affichées

Interested in the pricing of exploits?

See the underground prices here!