CVE-2014-3444

RealNetworks RealPlayer <= 16.0.3.51 - Remote Code Execution via Malformed .3gp File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-3444. PoCs published by Aryan Bayaninejad.

AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in RealPlayer 16.0.3.51 via a malformed .3gp file, potentially leading to a denial-of-service or arbitrary code execution. The PoC provides a crafted file to trigger the vulnerability in the `dmp4.dll` codec.

Description

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Aryan Bayaninejad · pythondosmultiple
https://www.exploit-db.com/exploits/39182

This exploit targets a memory corruption vulnerability in RealPlayer 16.0.3.51 via a malformed .3gp file, potentially leading to a denial-of-service or arbitrary code execution. The PoC provides a crafted file to trigger the vulnerability in the `dmp4.dll` codec.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Racy
Target: RealPlayer 16.0.3.51 and prior
No auth needed
Prerequisites: Victim must open the malformed .3gp file in RealPlayer
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

EPSS 0.0559
EPSS Percentile 91.9%

Details

CWE
CWE-94
Status published
Products (5)
realnetworks/realplayer 16.0.0
realnetworks/realplayer 16.0.0.282
realnetworks/realplayer 16.0.1.18
realnetworks/realplayer 16.0.2.32
realnetworks/realplayer < 16.0.3.51
Published May 20, 2014
Tracked Since Feb 18, 2026