CVE-2014-3444

published 2014-05-20

CVE-2014-3444: The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of…

Priority P3 51 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

EXPLOIT

The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
realnetworks	realplayer	<= 16.0.3.51	—
realnetworks	realplayer	—	—
realnetworks	realplayer	—	—
realnetworks	realplayer	—	—
realnetworks	realplayer	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94