CVEvulnerability

CVE-2013-3299

4.3 MEDIUM Published 2013-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.

Affected configurations

• realnetworks realplayer (<= 16.0.2.32) • realnetworks realplayer 4 • realnetworks realplayer 5 • realnetworks realplayer 6 • realnetworks realplayer 7 • realnetworks realplayer 8 • realnetworks realplayer 10.0 • realnetworks realplayer 10.5 • realnetworks realplayer 11.0 • realnetworks realplayer 11.0.1 • realnetworks realplayer 11.0.2 • realnetworks realplayer 11.0.2.1744 • realnetworks realplayer 11.0.2.2315 • realnetworks realplayer 11.0.3 • realnetworks realplayer 11.0.4 • realnetworks realplayer 11.0.5 • realnetworks realplayer 11.1 • realnetworks realplayer 11.1.3 • realnetworks realplayer 11 build 6.0.14.748 • realnetworks realplayer 12.0.0.1444 • realnetworks realplayer 12.0.0.1548 • realnetworks realplayer 14.0.0 • realnetworks realplayer 14.0.1 • realnetworks realplayer 14.0.1.609 • realnetworks realplayer 14.0.2 • realnetworks realplayer 14.0.3 • realnetworks realplayer 14.0.4 • realnetworks realplayer 14.0.5 • realnetworks realplayer 15.0.0 • realnetworks realplayer 15.0.1.13 • realnetworks realplayer 15.0.2.72 • realnetworks realplayer 15.0.3.37 • realnetworks realplayer 15.0.4 • realnetworks realplayer 15.0.4.43 • realnetworks realplayer 15.0.5.109 • realnetworks realplayer 15.0.6.14 • realnetworks realplayer 15.02.71 • realnetworks realplayer 16.0.0 • realnetworks realplayer 16.0.0.282

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References