CVE-2007-2263
8 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.959 High
EPSS
Percentile
99.4%
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
References
osvdb.org/38344
secunia.com/advisories/27361
service.real.com/realplayer/security/10252007_player/en/
www.attrition.org/pipermail/vim/2007-October/001841.html
www.securityfocus.com/archive/1/483110/100/0/threaded
www.securityfocus.com/bid/26214
www.securityfocus.com/bid/26284
www.securitytracker.com/id?1018866
www.vupen.com/english/advisories/2007/3628
www.zerodayinitiative.com/advisories/ZDI-07-061.html
exchange.xforce.ibmcloud.com/vulnerabilities/37436
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432
Related
8 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.959 High
EPSS
Percentile
99.4%