CVE Vulnerability

CVE-2007-2263

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.

9.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://service.real.com/realplayer/security/10252007_player/en/ Patch
http://www.attrition.org/pipermail/vim/2007-October/001841.html
http://www.securityfocus.com/bid/26214 Patch
http://www.securitytracker.com/id?1018866
http://secunia.com/advisories/27361 Patch Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-061.html
http://www.securityfocus.com/bid/26284
http://osvdb.org/38344
http://www.vupen.com/english/advisories/2007/3628 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/37436
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432
http://www.securityfocus.com/archive/1/483110/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:realnetworks:realplayer:10.0:10.0.7:linux:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1040:windows:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1741:windows:*:*:*:*:*
cpe:2.3:a:realnetworks:realone_player:2.0:*:windows:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.9:linux:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:windows:en:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.1:10.0.0.396:mac:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1578:windows:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.8:linux:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1698:windows:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.305:mac:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.1:10.0.0.412:mac:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.352:mac:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.6:linux:*:*:*:*:*
cpe:2.3:a:realnetworks:realone_player:*:*:mac:en:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.5:linux:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:*:windows:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.331:mac:*:*:*:*:*
Information

Published : 2007-10-31 05:46

Updated : 2018-10-16 04:42

NVD link : CVE-2007-2263

Mitre link : CVE-2007-2263

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer