Lucene search

K
cve[email protected]CVE-2007-4904
HistorySep 17, 2007 - 4:17 p.m.

CVE-2007-4904

2007-09-1716:17:00
CWE-189
web.nvd.nist.gov
15
cve-2007-4904
realnetworks
realplayer
helix player
fedora core 6
denial of service
remote attack
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

91.0%

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.

Affected configurations

NVD
Node
realnetworkshelix_playerMatch1.0.6linux
OR
realnetworksrealplayerMatch10.0.8linux
OR
realnetworksrealplayerMatch10.0.9linux
OR
realnetworksrealplayerMatch10.1linux
OR
realnetworksrealplayerMatch10.5-goldlinux

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

91.0%