CVE-2017-9302

MEDIUM

RealPlayer 16.0.2.32 - Denial of Service via Crafted MP4 File

Title source: llm

RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file.

Core 2

Core References

Third Party Advisory x_refsource_misc

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 5.5

EPSS 0.0024

EPSS Percentile 47.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-369

Status published

Products (1)

realnetworks/realplayer 16.0.2.32

Published May 29, 2017

Tracked Since Feb 18, 2026