CVE-2007-5080

2007-10-3117:46:00

CWE-189

mitre

web.nvd.nist.gov

cve-2007-5080

realnetworks

realplayer

realone player

windows

remote code execution

heap-based buffer overflow

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.908

Percentile

98.9%

JSON

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.

Affected configurations

Nvd

Node

realnetworksrealone_playerMatch1.0windowsen

realnetworksrealone_playerMatch2.0windows

realnetworksrealplayerMatch10.0windows

realnetworksrealplayerMatch10.56.0.12.1040windows

realnetworksrealplayerMatch10.56.0.12.1578windows

realnetworksrealplayerMatch10.56.0.12.1698windows

realnetworksrealplayerMatch10.56.0.12.1741windows

realnetworksrealplayer_enterprisewindowsen

VendorProductVersionCPE
realnetworksrealone_player1.0cpe:2.3:a:realnetworks:realone_player:1.0:*:windows:en:*:*:*:*
realnetworksrealone_player2.0cpe:2.3:a:realnetworks:realone_player:2.0:*:windows:*:*:*:*:*
realnetworksrealplayer10.0cpe:2.3:a:realnetworks:realplayer:10.0:*:windows:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1040:windows:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1578:windows:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1698:windows:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1741:windows:*:*:*:*:*
realnetworksrealplayer_enterprise*cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:windows:en:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	realone_player	1.0	cpe:2.3:a:realnetworks:realone_player:1.0::windows:en::::*
realnetworks	realone_player	2.0	cpe:2.3:a:realnetworks:realone_player:2.0::windows:::::
realnetworks	realplayer	10.0	cpe:2.3:a:realnetworks:realplayer:10.0::windows:::::
realnetworks	realplayer	10.5	cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1040:windows:::::*
realnetworks	realplayer	10.5	cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1578:windows:::::*
realnetworks	realplayer	10.5	cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1698:windows:::::*
realnetworks	realplayer	10.5	cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1741:windows:::::*
realnetworks	realplayer_enterprise	*	cpe:2.3:a:realnetworks:realplayer_enterprise:::windows:en::::