Unrated severityNVD Advisory· Published Dec 19, 2013· Updated Apr 29, 2026

CVE-2013-6877

Description

Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to execute arbitrary code via a long string in the TRACKID element of an RMP file, a different vulnerability than CVE-2013-7260.

Affected products

RealNetworks/Realplayer2 versions
cpe:2.3:a:realnetworks:realplayer:16.0.2.32:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:realnetworks:realplayer:16.0.2.32:*:*:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:16.0.3.51:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/bugtraq/2013-12/0104.htmlnvdExploit
www.coresecurity.com/advisories/realplayer-heap-based-buffer-overflow-vulnerabilitynvdExploit
packetstormsecurity.com/files/124535nvd
service.real.com/realplayer/security/12202013_player/en/nvd
www.securityfocus.com/bid/64398nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.028
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000