Lucene search

PRIOn knowledge basePRION:CVE-2007-4599

HistoryOct 31, 2007 - 5:46 p.m.

Stack overflow

2007-10-3117:46:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.4%

JSON

Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist (PLS) file.

CPENameOperatorVersion
realone_playereq2.0 windows
realone_playereq1.0 windows
realplayereq10.5 6.0.12.1040-windows
realplayereq10.5 6.0.12.1741-windows
realplayereq10.5 6.0.12.1578-windows
realplayereq10.5 6.0.12.1698-windows
realplayereq10.0 windows

Name	Operator	Version
realone_player	eq	2.0 windows
realone_player	eq	1.0 windows
realplayer	eq	10.5 6.0.12.1040-windows
realplayer	eq	10.5 6.0.12.1741-windows
realplayer	eq	10.5 6.0.12.1578-windows
realplayer	eq	10.5 6.0.12.1698-windows
realplayer	eq	10.0 windows

References

osvdb.org/38341

secunia.com/advisories/27361

securitytracker.com/id?1018866

service.real.com/realplayer/security/10252007_player/en/

www.attrition.org/pipermail/vim/2007-October/001841.html

www.securityfocus.com/archive/1/483112/100/0/threaded

www.securityfocus.com/bid/26214

www.vupen.com/english/advisories/2007/3628

www.zerodayinitiative.com/advisories/ZDI-07-062.html

exchange.xforce.ibmcloud.com/vulnerabilities/37438

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.4%

JSON

Related for PRION:CVE-2007-4599