CVE-2012-1904

Опубликовано: 28 мар. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*

Версия до 15.0.0 (включая)

cpe:2.3:a:realnetworks:realplayer:4:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:5:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:6:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:7:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:8:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.2.1744:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.2.2315:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11.1.3:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:11_build_6.0.14.748:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:12.0.0.1444:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:12.0.0.1548:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.1.609:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.2:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.3:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.4:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:14.0.5:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:realnetworks:realplayer_sp:*:*:*:*:*:*:*:*

Версия до 1.1.4 (включая)

cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08511

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-qmv3-xcc3-386c

github

больше 3 лет назад