Realnetworks Realplayer Luki w zabezpieczeniach

Oś czasu

Wersja

11.088
11.0.176
11.0.276
11.0.376
11.0.476

Przeciwdziałanie

Official Fix84
Temporary Fix0
Workaround0
Unavailable6
Not Defined90

Wykorzystywanie

High8
Functional0
Proof-of-Concept62
Unproven0
Not Defined110

Wektor dostępu

Not Defined0
Physical0
Local6
Adjacent2
Network172

Uwierzytelnianie

Not Defined0
High0
Low14
None166

Interakcja z użytkownikiem

Not Defined0
Required10
None170

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤56
≤612
≤74
≤832
≤94
≤10118

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤58
≤614
≤728
≤84
≤924
≤1098

VulDB

≤10
≤20
≤30
≤46
≤54
≤612
≤74
≤832
≤94
≤10118

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k4
<10k16
<25k22
<50k136
<100k0
≥100k2

Wykorzystaj dzisiaj

<1k108
<2k4
<5k8
<10k26
<25k34
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (166): 1, 1.0, 1.0.1, 1.0.2, 1.0.5, 1.0.6, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 2.0, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 6.0, 6.0.10.505, 6.0.11.83, 6.0.11.774, 6.0.11.818, 6.0.11.841, 6.0.11.853, 7.0, 8, 8.0, 9.0.0.288, 9.0.0.297, 10, 10.0, 10.0 6.0.12.69, 10.0 Beta, 10.0.5, 10.0.5.756, 10.0.6, 10.0.8, 10.0.9, 10.1, 10.2, 10.3, 10.4, 10.5, 10.5 6.0.12.104, 10.5 6.0.12.1016 Beta, 10.5 6.0.12.1040 1069, 10.5 6.0.12.1053, 10.5 6.0.12.1056, 10.5 6.0.12.1059, 10.5 6.0.12.1069, 10.5 6.0.12.1235, 10.5 6.0.12.1348, 10.5-gold, 11, 11 Beta, 11 Build 6.0.14.748, 11.0, 11.0.1, 11.0.2, 11.0.2.1744, 11.0.2.2315, 11.0.3, 11.0.4, 11.0.5, 11.1, 11.1.3, 12.0.0.1444, 12.0.0.1548, 12.0.0.1569, 12.0.0.1701, 14, 14.0.1, 14.0.1.609, 14.0.1.633, 14.0.2, 14.0.3, 14.0.4, 14.0.5, 14.0.6, 14.0.7, 15, 15.0.1.13, 15.0.3, 15.0.3.1, 15.0.3.2, 15.0.3.3, 15.0.3.4, 15.0.3.5, 15.0.3.6, 15.0.3.7, 15.0.3.8, 15.0.3.9, 15.0.3.11, 15.0.3.12, 15.0.3.13, 15.0.3.14, 15.0.3.15, 15.0.3.16, 15.0.3.17, 15.0.3.18, 15.0.3.19, 15.0.3.21, 15.0.3.22, 15.0.3.23, 15.0.3.24, 15.0.3.25, 15.0.3.26, 15.0.3.27, 15.0.3.28, 15.0.3.29, 15.0.3.31, 15.0.3.32, 15.0.3.33, 15.0.3.34, 15.0.3.35, 15.0.3.36, 15.0.4, 15.0.6.14, 15.02.71, 16, 16.0.0.282, 16.0.1.18, 16.0.2, 16.0.2.1, 16.0.2.2, 16.0.2.3, 16.0.2.4, 16.0.2.5, 16.0.2.6, 16.0.2.7, 16.0.2.8, 16.0.2.9, 16.0.2.11, 16.0.2.12, 16.0.2.13, 16.0.2.14, 16.0.2.15, 16.0.2.16, 16.0.2.17, 16.0.2.18, 16.0.2.19, 16.0.2.21, 16.0.2.22, 16.0.2.23, 16.0.2.24, 16.0.2.25, 16.0.2.26, 16.0.2.27, 16.0.2.28, 16.0.2.29, 16.0.2.31, 16.0.2.32, 16.0.3.51, 17.0.2.206, 17.0.4.6, 17.0.8.22, 18.1.5.705, 20.0.7.309, 20.0.8.31, 20.1.0.312

Link to Product Website: https://www.realnetworks.com/

Typ oprogramowania: Multimedia Player Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2022-06-066.36.1RealNetworks RealPlayer UNC Share Pathname privilege escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-32291
2022-06-033.53.4RealNetworks RealPlayer G2 Control cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-32269
2022-06-033.53.4RealNetworks RealPlayer DCP URI cross site scripting$0-$5k$5k-$25kNot DefinedNot Defined0.00CVE-2022-32271
2022-06-036.36.1RealNetworks RealPlayer Import directory traversal$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2022-32270
2017-05-294.44.4RealNetworks RealPlayer MP4 File denial of service$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2017-9302
2016-10-285.55.2RealNetworks RealPlayer VRAT Chunk qcpfformat.dll denial of service$0-$5k$0-$5kProof-of-ConceptNot Defined0.02CVE-2016-9018
2014-07-047.36.4RealNetworks RealPlayer MP4 memory corruption$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2014-3113
2014-05-167.36.9RealNetworks RealPlayer 3GP File privilege escalation$25k-$100k$0-$5kProof-of-ConceptUnavailable0.00CVE-2014-3444
2013-12-2010.09.5RealNetworks RealPlayer RMP File memory corruption$25k-$100k$0-$5kHighOfficial Fix0.00CVE-2013-7260
2013-12-1710.09.4RealNetworks RealPlayer RMP File memory corruption$25k-$100k$0-$5kProof-of-ConceptNot Defined0.00CVE-2013-6877
2013-08-2310.09.5RealNetworks RealPlayer Filename memory corruption$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-4973
2013-08-2310.09.5RealNetworks RealPlayer RealMedia File memory corruption$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-4974
2013-07-027.56.7RealNetworks RealPlayer HTML privilege escalation$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2013-3299
2013-03-1510.09.5RealNetworks RealPlayer User Input Sanitizer memory corruption$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-1750
2012-12-149.98.9RealNetworks RealPlayer RealAudio File privilege escalation$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-5690
2012-12-149.99.2RealNetworks RealPlayer RealMedia File memory corruption$25k-$100k$0-$5kHighOfficial Fix0.00CVE-2012-5691
2012-09-127.37.3RealNetworks RealPlayer memory corruption$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2012-2408
2012-09-127.37.3RealNetworks RealPlayer memory corruption$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2012-2407
2012-09-078.48.4RealNetworks RealPlayer rio500.dll privilege escalation$25k-$100k$5k-$25kNot DefinedNot Defined0.00CVE-2010-5228
2012-09-0710.08.7RealNetworks RealPlayer memory corruption$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-2409
2012-09-0710.08.7RealNetworks RealPlayer memory corruption$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-2410
2012-09-077.56.5RealNetworks RealPlayer RealAudio Codec denial of service$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-3234
2012-05-159.98.6RealNetworks RealPlayer RealJukebox Media Parser memory corruption$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-2411
2012-05-159.98.6RealNetworks RealPlayer ASMRuleBook memory corruption$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-2406
2012-03-249.98.9RealNetworks RealPlayer MP4 File mp4fformat.dll memory corruption$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-1904

155 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Realnetworks

Want to stay up to date on a daily basis?

Enable the mail alert feature now!