CVE-2013-7260

CVE-2013-7260 describes multiple stack-based buffer overflows in RealNetworks RealPlayer versions prior to 17.0.4.61 on Windows and 12.0.1.1738 on Mac. This critical vulnerability allows remote attackers to execute arbitrary code by supplying an overly long version number or encoding declaration within the XML declaration of an RMP file. With a CVSS score of 7.5, this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Exploit intelligence indicates public exploit code availability, including a Metasploit module and an ExploitDB entry, though there is no evidence of active exploitation in the wild or significant community discussion.