CVE-2007-2263

EPSS 10%
Veröffentlicht 31.10.2007 17:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 15

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Realnetworks ≫ Realone Player Editionmac Langen

Realnetworks ≫ Realone Player Version2.0 Editionwindows

Realnetworks ≫ Realplayer Version10.0 Editionwindows

Realnetworks ≫ Realplayer Version10.0 Update10.0.0.305 Editionmac

Realnetworks ≫ Realplayer Version10.0 Update10.0.0.331 Editionmac

Realnetworks ≫ Realplayer Version10.0 Update10.0.0.352 Editionmac

Realnetworks ≫ Realplayer Version10.0 Update10.0.5 Editionlinux

Realnetworks ≫ Realplayer Version10.0 Update10.0.6 Editionlinux

Realnetworks ≫ Realplayer Version10.0 Update10.0.7 Editionlinux

Realnetworks ≫ Realplayer Version10.0 Update10.0.8 Editionlinux

Realnetworks ≫ Realplayer Version10.0 Update10.0.9 Editionlinux

Realnetworks ≫ Realplayer Version10.1 Update10.0.0.396 Editionmac

Realnetworks ≫ Realplayer Version10.1 Update10.0.0.412 Editionmac

Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1040 Editionwindows

Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1578 Editionwindows

Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1698 Editionwindows

Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1741 Editionwindows

Realnetworks ≫ Realplayer Enterprise Editionwindows Langen

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10%	0.923

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/27361

Patch

Vendor Advisory

http://service.real.com/realplayer/security/10252007_player/en/

Patch

http://www.attrition.org/pipermail/vim/2007-October/001841.html

http://www.vupen.com/english/advisories/2007/3628

Vendor Advisory

http://osvdb.org/38344

http://www.securityfocus.com/archive/1/483110/100/0/threaded

http://www.securityfocus.com/bid/26214

Patch