Summary
This host is installed with RealPlayer which is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow remote attackers to execute arbitrary code on the system or cause the application to crash.
Impact Level: System/Application
Solution
Upgrade to RealPlayer version 12.0.1.1750 or later, For updates refer to http://www.real.com/player
Insight
Multiple errors caused, when
- Unpacking AAC stream
- Decoding AAC SDK
- Handling RealMedia files, which can be exploited to cause a buffer overflow.
Affected
RealPlayer version 12.0.0.1701 and prior on Mac OS X
References
Severity
Classification
-
CVE CVE-2012-2407, CVE-2012-2408, CVE-2012-2409, CVE-2012-2410, CVE-2012-3234 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Adobe Air and Flash Player Multiple Vulnerabilities August-2011 (Windows)
- Adobe Acrobat and Reader Multiple Vulnerabilities -July10 (Windows)
- Adobe Acrobat Multiple Unspecified Vulnerabilities - Windows
- Adobe Acrobat Multiple Vulnerabilities April-2012 (Mac OS X)
- Adobe AIR Multiple Vulnerabilities-01 Aug14 (Windows)