Lucene search

K
nvd[email protected]NVD:CVE-2006-0323
HistoryMar 23, 2006 - 11:06 p.m.

CVE-2006-0323

2006-03-2323:06:00
CWE-119
web.nvd.nist.gov
7

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.968

Percentile

99.7%

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

Affected configurations

Nvd
Node
realnetworkshelix_player
OR
realnetworksrealone_player
OR
realnetworksrealplayerMatch10.0gold
OR
realnetworksrealplayerMatch10.0.6
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrhapsodyMatch3

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.968

Percentile

99.7%