CVE:CVE-2013-7260
CNNVD:CNNVD-201401-040
RealNetworks RealNetworks RealPlayer是美国RealNetworks公司开发的一套媒体播放器产品。该产品提供下载/转换视频（在网页中）、编辑视频、管理媒体文件等功能。
基于Windows平台上的RealNetworks RealPlayer 17.0.4.61之前的版本和Mac RealPlayer 12.0.1.1738之前的版本中存在基于栈的缓冲区溢出漏洞。远程攻击者可通过RMP文件中XML声明里的长版本号或编码声明利用该漏洞执行任意代码。
solution:Upgrade realnetworks realplayer to a higher version than 17.0.4.60,2.1.2,2.1.3,2.1.4,4,5,6,7,8,10.0,10.5,11.0,11.0.1,11.0.2,11.0.2.1744,11.0.2.2315,11.0.3,11.0.4,11.0.5,11.1,11.1.3,11_build_6.0.14.748,12.0.0.1444,12.0.0.1548,14.0.0,14.0.1,14.0.1.609,14.0.2,14.0.3,14.0.4,14.0.5,15.0.0,15.0.4,15.0.4.43,15.0.5.109,15.0.6.14,15.02.71,16.0.0,16.0.0.282,16.0.1.18,16.0.2.32,16.0.3.51,10.0:10.0.0.305,10.0:10.0.0.331,10.0:10.0.0.352,10.1:10.0.0._481,10.1:10.0.0.396,10.1:10.0.0.412,12.0.0.1701,12.0.1.1737,and avoid the version (,17.0.4.60],2.1.2,2.1.3,2.1.4,4,5,6,7,8,10.0,10.5,11.0,11.0.1,11.0.2,11.0.2.1744,11.0.2.2315,11.0.3,11.0.4,11.0.5,11.1,11.1.3,11_build_6.0.14.748,12.0.0.1444,12.0.0.1548,14.0.0,14.0.1,14.0.1.609,14.0.2,14.0.3,14.0.4,14.0.5,15.0.0,15.0.4,15.0.4.43,15.0.5.109,15.0.6.14,15.02.71,16.0.0,16.0.0.282,16.0.1.18,16.0.2.32,16.0.3.51,10.0:10.0.0.305,10.0:10.0.0.331,10.0:10.0.0.352,10.1:10.0.0._481,10.1:10.0.0.396,10.1:10.0.0.412,12.0.0.1701,12.0.1.1737