Back to Database
Status published
Critical
CVE-2013-1750
Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer...
Vulnerability Description
Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4 file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-1750
Credits & Attribution
No credits recorded in the NVD database.
More from realnetworks
View All →CVE-2022-32291
In Real Player through 20.1.0.312, attackers can execute arbitrary code...
High
8.8
CVE-2022-32271
In Real Player 20.0.8.310, there is a DCP:// URI Remote...
Critical
9.6
CVE-2022-32270
In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of...
Critical
9.8
CVE-2022-32269
In Real Player 20.0.8.310, the G2 Control allows injection of...
Critical
9.8
CVE-2018-13121
RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause...
Medium
5.5
Affected Vendor
realnetworks
View all reports →Affected Software
realplayer, realplayer sp
Vulnerable Versions:
0, 4, 5, 6, 7, 8, 10.0, 10.5, 11.0, 11.0.1, 11.0.2, 11.0.2.1744, 11.0.2.2315, 11.0.3, 11.0.4, 11.0.5, 11.1, 11.1.3, 11_build_6.0.14.748, 12.0.0.1444, 12.0.0.1548, 14.0.0, 14.0.1, 14.0.1.609, 14.0.2, 14.0.3, 14.0.4, 14.0.5, 15.0.0, 15.0.1.13, 15.0.2.72, 15.0.3.37, 15.0.4, 15.0.4.43, 15.0.5.109, 15.0.6.14, 15.02.71, 16.0.0, 1.0.0, 1.0.1, 1.0.2, 1.0.5, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5
Timeline
Official Publish:
March 20th, 2013
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.