CVE-2007-2263

EPSS 7.3%
Veröffentlicht 31.10.2007 17:46:00
Zuletzt bearbeitet 16.06.2026 22:39:14
Erkennungen
Login

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 15

NVD 18 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Realnetworks ≫ Realone Player Edition mac Lang en

Realnetworks ≫ Realone Player Version 2.0 Edition windows

Realnetworks ≫ Realplayer Version 10.0 Edition windows

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.0.305 Edition mac

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.0.331 Edition mac

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.0.352 Edition mac

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.5 Edition linux

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.6 Edition linux

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.7 Edition linux

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.8 Edition linux

Realnetworks ≫ Realplayer Version 10.0 Update 10.0.9 Edition linux

Realnetworks ≫ Realplayer Version 10.1 Update 10.0.0.396 Edition mac

Realnetworks ≫ Realplayer Version 10.1 Update 10.0.0.412 Edition mac

Realnetworks ≫ Realplayer Version 10.5 Update 6.0.12.1040 Edition windows

Realnetworks ≫ Realplayer Version 10.5 Update 6.0.12.1578 Edition windows

Realnetworks ≫ Realplayer Version 10.5 Update 6.0.12.1698 Edition windows

Realnetworks ≫ Realplayer Version 10.5 Update 6.0.12.1741 Edition windows

Realnetworks ≫ Realplayer Enterprise Edition windows Lang en

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.3%	0.936

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/27361

Patch

Vendor Advisory

http://service.real.com/realplayer/security/10252007_player/en/

Patch

http://www.attrition.org/pipermail/vim/2007-October/001841.html

http://www.vupen.com/english/advisories/2007/3628

Vendor Advisory

http://osvdb.org/38344

http://www.securityfocus.com/archive/1/483110/100/0/threaded

http://www.securityfocus.com/bid/26214

Patch

http://www.securityfocus.com/bid/26284

http://www.securitytracker.com/id?1018866

http://www.zerodayinitiative.com/advisories/ZDI-07-061.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/37436

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432

https://nvd.nist.gov/vuln/detail/CVE-2007-2263

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2263

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2263

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-2263