9.3

CVE-2007-2264

Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.

Data is provided by the National Vulnerability Database (NVD)
Realnetworks ≫ Realone Player Editionmac Langen
Realnetworks ≫ Realone Player Version1.0 Editionwindows Langen
Realnetworks ≫ Realone Player Version2.0 Editionwindows
Realnetworks ≫ Realplayer Version8.0
Realnetworks ≫ Realplayer Version10.0 Editionwindows
Realnetworks ≫ Realplayer Version10.0 Update10.0.0.305 Editionmac
Realnetworks ≫ Realplayer Version10.0 Update10.0.0.331 Editionmac
Realnetworks ≫ Realplayer Version10.0 Update10.0.0.352 Editionmac
Realnetworks ≫ Realplayer Version10.0 Update10.0.5 Editionlinux
Realnetworks ≫ Realplayer Version10.0 Update10.0.6 Editionlinux
Realnetworks ≫ Realplayer Version10.0 Update10.0.7 Editionlinux
Realnetworks ≫ Realplayer Version10.0 Update10.0.8 Editionlinux
Realnetworks ≫ Realplayer Version10.0 Update10.0.9 Editionlinux
Realnetworks ≫ Realplayer Version10.1 Update10.0.0._481 Editionmac
Realnetworks ≫ Realplayer Version10.1 Update10.0.0.396 Editionmac
Realnetworks ≫ Realplayer Version10.1 Update10.0.0.412 Editionmac
Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1040 Editionwindows
Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1578 Editionwindows
Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1698 Editionwindows
Realnetworks ≫ Realplayer Version10.5 Update6.0.12.1741 Editionwindows
Realnetworks ≫ Realplayer Enterprise Editionwindows Langen
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 12.03% 0.931
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.