CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
98.9%
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.
Vendor | Product | Version | CPE |
---|---|---|---|
realnetworks | realone_player | 1.0 | cpe:2.3:a:realnetworks:realone_player:1.0:*:windows:en:*:*:*:* |
realnetworks | realone_player | 2.0 | cpe:2.3:a:realnetworks:realone_player:2.0:*:windows:*:*:*:*:* |
realnetworks | realplayer | 10.0 | cpe:2.3:a:realnetworks:realplayer:10.0:*:windows:*:*:*:*:* |
realnetworks | realplayer | 10.5 | cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1040:windows:*:*:*:*:* |
realnetworks | realplayer | 10.5 | cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1578:windows:*:*:*:*:* |
realnetworks | realplayer | 10.5 | cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1698:windows:*:*:*:*:* |
realnetworks | realplayer | 10.5 | cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1741:windows:*:*:*:*:* |
realnetworks | realplayer_enterprise | * | cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:windows:en:*:*:*:* |
secunia.com/advisories/27361
service.real.com/realplayer/security/10252007_player/en/
www.attrition.org/pipermail/vim/2007-October/001841.html
www.kb.cert.org/vuls/id/759385
www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/
www.securityfocus.com/bid/26214
www.securitytracker.com/id?1018866
www.vupen.com/english/advisories/2007/3628
exchange.xforce.ibmcloud.com/vulnerabilities/37434