CVE-2013-3299: Realnetworks Realplayer

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string.

Affected products

• Realnetworks Realplayer: up to and including 16.0.2.32; version 4 only; version 5 only; version 6 only; version 7 only; version 8 only; …

Published 2013-07-06. Last modified 2026-06-16.