2.6.0.481

DATE	CVE	VULNERABILITY TITLE	RISK
2015-01-12	CVE-2013-2604	Permissions, Privileges, and Access Controls vulnerability in Realnetworks Realarcade Installer 2.6.0.481/3.0.7 RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated by DDRAW.DLL in the Zuma Deluxe directory. local low complexity realnetworks CWE-264	7.2
2015-01-12	CVE-2013-2603	Use After Free Remote Code Execution vulnerability in Realnetworks Realarcade Installer 2.6.0.481 The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted arguments to the (1) AddTag, (2) Ping, (3) QueuePause, (4) QueueRemove, (5) QueueTop, (6) RemoveTag, (7) TagRemoved, or (8) message method. network low complexity realnetworks critical	10.0