Записи RealNetworks
217 опубликованных записей вендора realnetworks.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 9 · 4,1 %
- Pre-auth RCE
- 149
- С записью об исправлении
- 13,8 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer78
- CWE-94 Improper Control of Generation of Code ('Code Injection')21
- CWE-20 Improper Input Validation13
- CWE-189 Numeric Errors10
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-399 Resource Management Errors5
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
217 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
57В плане | CVE-2010-1318Готовый эксплойт | Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobilerealnetworks · helix mobile server · CWE-119 | Критическая10,0 | — | 58,0 % | 20 апр. 2010 г. |
53В плане | CVE-2012-5691Готовый эксплойт | Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrarrealnetworks · realplayer · CWE-119 | Критическая9,3 | — | 52,7 % | 19 дек. 2012 г. |
52В плане | CVE-2002-1643Готовый эксплойт | Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a realnetworks · helix universal server | Высокая7,5 | — | 74,7 % | 19 дек. 2002 г. |
51В плане | CVE-2008-1309Готовый эксплойт | The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before realnetworks · realplayer · CWE-399 | Критическая9,3 | — | 45,9 % | 12 мар. 2008 г. |
50В плане | CVE-2013-7260Готовый эксплойт | Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow rrealnetworks · realplayer · CWE-119 | Высокая7,5 | — | 66,8 % | 3 янв. 2014 г. |
50В плане | CVE-2007-5601Готовый эксплойт | Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions inclrealnetworks · realplayer · CWE-119 | Критическая9,3 | — | 42,2 % | 20 окт. 2007 г. |
48В плане | CVE-2007-3410Proof of concept | Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and porealnetworks · helix player · CWE-119 | Критическая9,3 | — | 36,0 % | 26 июн. 2007 г. |
47В плане | CVE-2010-3747Готовый эксплойт | An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not prealnetworks · realplayer · CWE-119 | Критическая9,3 | — | 34,7 % | 18 окт. 2010 г. |
46В плане | CVE-2004-0389Proof of concept | RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests thatrealnetworks · helix universal server · CWE-476 | Высокая7,5 | — | 54,9 % | 1 июн. 2004 г. |
46В плане | CVE-2011-2950Готовый эксплойт | Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 threalnetworks · realplayer · CWE-119 | Критическая9,3 | — | 28,6 % | 18 авг. 2011 г. |
45В плане | CVE-2003-0725Proof of concept | Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Srealnetworks · helix universal server | Высокая7,5 | — | 48,5 % | 20 окт. 2003 г. |
45В плане | CVE-2010-3749Proof of concept | The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to realnetworks · realplayer · CWE-94 | Критическая9,3 | — | 25,6 % | 18 окт. 2010 г. |
44В плане | CVE-1999-0896Proof of concept | Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username realnetworks · realserver g2 | Критическая10,0 | — | 12,8 % | 4 нояб. 1999 г. |
43В плане | CVE-2006-6026Proof of concept | Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows rrealnetworks · helix dna server · CWE-119 | Критическая10,0 | — | 11,3 % | 21 нояб. 2006 г. |
43В плане | CVE-2004-1094Эксплойта нет | Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a innermedia · dynazip library | Критическая10,0 | — | 9,5 % | 10 янв. 2005 г. |
42В плане | CVE-2006-0323Proof of concept | Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Hrealnetworks · helix player · CWE-119 | Критическая9,3 | — | 16,7 % | 23 мар. 2006 г. |
42В плане | CVE-2007-2924Эксплойта нет | Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) allow remote attackers to execute arbitrary coderealnetworks · gamehouse | Критическая10,0 | — | 7,6 % | 19 июн. 2007 г. |
42В плане | CVE-2008-5911Эксплойта нет | Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackrealnetworks · helix server · CWE-119 | Критическая10,0 | — | 6,1 % | 20 янв. 2009 г. |
42В плане | CVE-2008-0098Эксплойта нет | Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors.realnetworks · realplayer · CWE-119 | Критическая10,0 | — | 5,5 % | 7 янв. 2008 г. |
42В плане | CVE-2007-4561Эксплойта нет | Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSrealnetworks · helix dna server · CWE-20 | Критическая10,0 | — | 5,5 % | 27 авг. 2007 г. |
42В плане | CVE-2010-1319Эксплойта нет | Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.realnetworks · helix mobile server · CWE-189 | Критическая10,0 | — | 5,1 % | 20 апр. 2010 г. |
41В плане | CVE-2011-1525Proof of concept | Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 thrrealnetworks · realplayer · CWE-119 | Критическая9,3 | — | 11,9 % | 6 апр. 2011 г. |
41В плане | CVE-2011-4256Эксплойта нет | The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index valuerealnetworks · realplayer · CWE-94 | Критическая10,0 | — | 4,2 % | 24 нояб. 2011 г. |
41В плане | CVE-2013-2603Эксплойта нет | The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpecterealnetworks · realarcade installer | Критическая10,0 | — | 4,1 % | 12 янв. 2015 г. |
41В плане | CVE-2011-2946Эксплойта нет | Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 threalnetworks · realplayer | Критическая10,0 | — | 4,1 % | 18 авг. 2011 г. |
- CVE-2010-131857В плане
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile
КритическаяCVSS 10,0Готовый эксплойтEPSS 58 %realnetworks · helix mobile server20 апр. 2010 г.
- CVE-2012-569153В плане
Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrar
КритическаяCVSS 9,3Готовый эксплойтEPSS 52 %realnetworks · realplayer19 дек. 2012 г.
- CVE-2002-164352В плане
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a
ВысокаяCVSS 7,5Готовый эксплойтEPSS 74 %realnetworks · helix universal server19 дек. 2002 г.
- CVE-2008-130951В плане
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before
КритическаяCVSS 9,3Готовый эксплойтEPSS 45 %realnetworks · realplayer12 мар. 2008 г.
- CVE-2013-726050В плане
Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow r
ВысокаяCVSS 7,5Готовый эксплойтEPSS 66 %realnetworks · realplayer3 янв. 2014 г.
- CVE-2007-560150В плане
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions incl
КритическаяCVSS 9,3Готовый эксплойтEPSS 42 %realnetworks · realplayer20 окт. 2007 г.
- CVE-2007-341048В плане
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and po
КритическаяCVSS 9,3Proof of conceptEPSS 36 %realnetworks · helix player26 июн. 2007 г.
- CVE-2010-374747В плане
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not p
КритическаяCVSS 9,3Готовый эксплойтEPSS 34 %realnetworks · realplayer18 окт. 2010 г.
- CVE-2004-038946В плане
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that
ВысокаяCVSS 7,5Proof of conceptEPSS 54 %realnetworks · helix universal server1 июн. 2004 г.
- CVE-2011-295046В плане
Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 th
КритическаяCVSS 9,3Готовый эксплойтEPSS 28 %realnetworks · realplayer18 авг. 2011 г.
- CVE-2003-072545В плане
Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal S
ВысокаяCVSS 7,5Proof of conceptEPSS 48 %realnetworks · helix universal server20 окт. 2003 г.
- CVE-2010-374945В плане
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to
КритическаяCVSS 9,3Proof of conceptEPSS 25 %realnetworks · realplayer18 окт. 2010 г.
- CVE-1999-089644В плане
Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username
КритическаяCVSS 10,0Proof of conceptEPSS 12 %realnetworks · realserver g24 нояб. 1999 г.
- CVE-2006-602643В плане
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows r
КритическаяCVSS 10,0Proof of conceptEPSS 11 %realnetworks · helix dna server21 нояб. 2006 г.
- CVE-2004-109443В плане
Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a
КритическаяCVSS 10,0Эксплойта нетEPSS 9 %innermedia · dynazip library10 янв. 2005 г.
- CVE-2006-032342В плане
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and H
КритическаяCVSS 9,3Proof of conceptEPSS 16 %realnetworks · helix player23 мар. 2006 г.
- CVE-2007-292442В плане
Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) allow remote attackers to execute arbitrary code
КритическаяCVSS 10,0Эксплойта нетEPSS 7 %realnetworks · gamehouse19 июн. 2007 г.
- CVE-2008-591142В плане
Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attack
КритическаяCVSS 10,0Эксплойта нетEPSS 6 %realnetworks · helix server20 янв. 2009 г.
- CVE-2008-009842В плане
Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors.
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %realnetworks · realplayer7 янв. 2008 г.
- CVE-2007-456142В плане
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RS
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %realnetworks · helix dna server27 авг. 2007 г.
- CVE-2010-131942В плане
Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %realnetworks · helix mobile server20 апр. 2010 г.
- CVE-2011-152541В плане
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 thr
КритическаяCVSS 9,3Proof of conceptEPSS 11 %realnetworks · realplayer6 апр. 2011 г.
- CVE-2011-425641В плане
The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value
КритическаяCVSS 10,0Эксплойта нетEPSS 4 %realnetworks · realplayer24 нояб. 2011 г.
- CVE-2013-260341В плане
The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpecte
КритическаяCVSS 10,0Эксплойта нетEPSS 4 %realnetworks · realarcade installer12 янв. 2015 г.
- CVE-2011-294641В плане
Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 th
КритическаяCVSS 10,0Эксплойта нетEPSS 4 %realnetworks · realplayer18 авг. 2011 г.