CVEvulnerability

CVE-2014-3444

9.3 HIGH Published 2014-05-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.

Affected configurations

• realnetworks realplayer (<= 16.0.3.51) • realnetworks realplayer 16.0.0 • realnetworks realplayer 16.0.0.282 • realnetworks realplayer 16.0.1.18 • realnetworks realplayer 16.0.2.32

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References