CVE-2007-3410

2007-06-2622:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.953

Percentile

99.4%

JSON

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

Affected configurations

Nvd

Node

realnetworkshelix_playerMatch10.0.5

realnetworkshelix_playerMatch10.0.6

realnetworkshelix_playerMatch10.0.7

realnetworkshelix_playerMatch10.0.8

realnetworkshelix_playerMatch10.5-gold

realnetworksrealone_player

realnetworksrealplayerMatch10.0

realnetworksrealplayerMatch10.1

realnetworksrealplayerMatch10.5

realnetworksrealplayer_enterprise

VendorProductVersionCPE
realnetworkshelix_player10.0.5cpe:2.3:a:realnetworks:helix_player:10.0.5:*:*:*:*:*:*:*
realnetworkshelix_player10.0.6cpe:2.3:a:realnetworks:helix_player:10.0.6:*:*:*:*:*:*:*
realnetworkshelix_player10.0.7cpe:2.3:a:realnetworks:helix_player:10.0.7:*:*:*:*:*:*:*
realnetworkshelix_player10.0.8cpe:2.3:a:realnetworks:helix_player:10.0.8:*:*:*:*:*:*:*
realnetworkshelix_player10.5-goldcpe:2.3:a:realnetworks:helix_player:10.5-gold:*:*:*:*:*:*:*
realnetworksrealone_player*cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*
realnetworksrealplayer10.0cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
realnetworksrealplayer10.1cpe:2.3:a:realnetworks:realplayer:10.1:*:*:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
realnetworksrealplayer_enterprise*cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	helix_player	10.0.5	cpe:2.3:a:realnetworks:helix_player:10.0.5:::::::*
realnetworks	helix_player	10.0.6	cpe:2.3:a:realnetworks:helix_player:10.0.6:::::::*
realnetworks	helix_player	10.0.7	cpe:2.3:a:realnetworks:helix_player:10.0.7:::::::*
realnetworks	helix_player	10.0.8	cpe:2.3:a:realnetworks:helix_player:10.0.8:::::::*
realnetworks	helix_player	10.5-gold	cpe:2.3:a:realnetworks:helix_player:10.5-gold:::::::*
realnetworks	realone_player	*	cpe:2.3:a:realnetworks:realone_player::::::::
realnetworks	realplayer	10.0	cpe:2.3:a:realnetworks:realplayer:10.0:::::::*
realnetworks	realplayer	10.1	cpe:2.3:a:realnetworks:realplayer:10.1:::::::*
realnetworks	realplayer	10.5	cpe:2.3:a:realnetworks:realplayer:10.5:::::::*
realnetworks	realplayer_enterprise	*	cpe:2.3:a:realnetworks:realplayer_enterprise::::::::