CVE-2013-3299

RealNetworks RealPlayer <16.0.2.32 - DoS

Title source: llm

Description

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Akshaysinh Vaghela · htmldosmultiple

https://www.exploit-db.com/exploits/38623

View Code ZIP pw:eip

References (1)

[Mailing List] http://seclists.org/bugtraq/2013/Jul/18

Scores

EPSS 0.1171

EPSS Percentile 93.6%

Classification

CWE

CWE-20

Status draft

Affected Products (39)

realnetworks/realplayer < 16.0.2.32

realnetworks/realplayer

... and 24 more

Timeline

Published Jul 06, 2013

Tracked Since Feb 18, 2026