RealNetworks RealPlayer CVE-2013-3299 Denial of Service Vulnerability

Bugtraq ID:	60903
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3299
Remote:	Yes
Local:	No
Published:	Jul 02 2013 12:00AM
Updated:	Jul 09 2013 02:52PM
Credit:	Akshaysinh Vaghela
Vulnerable:	RealNetworks RealPlayer 14.0.2 Real Networks RealPlayer 15.2.71 Real Networks RealPlayer 15.1.13 Real Networks RealPlayer 14.0.7 Real Networks RealPlayer 14.0.2 633 Real Networks RealPlayer 15.0.4.53 Real Networks RealPlayer 15.0.3.37 Real Networks RealPlayer 15.0 Real Networks RealPlayer 14.0.6 Real Networks RealPlayer 14.0.5 Real Networks RealPlayer 14.0.3 Real Networks RealPlayer 14.0.2 Real Networks RealPlayer 14.0.1.633 Real Networks RealPlayer 14.0.1.609 Real Networks RealPlayer 14.0.1 Real Networks RealPlayer 14.0.0
Not Vulnerable:

RealNetworks RealPlayer CVE-2013-3299 Denial of Service Vulnerability

RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability.

Successful exploits will allow attackers to consume an excessive amount of CPU resources, denying service to legitimate users.

RealPlayer 16.0.2.32 and prior are vulnerable.

RealNetworks RealPlayer CVE-2013-3299 Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/60903.html

RealNetworks RealPlayer CVE-2013-3299 Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

RealNetworks RealPlayer CVE-2013-3299 Denial of Service Vulnerability

References:

• RealPlayer Homepage (Real Networks)