RedHatRHSA-2007:0841(RHSA-2007:0841) Critical: RealPlayer security update
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.963 High
EPSS
Percentile
99.4%
RealPlayer is a media player that provides media playback locally and via
streaming.
A buffer overflow flaw was found in the way RealPlayer processed
Synchronized Multimedia Integration Language (SMIL) files. It was possible
for a malformed SMIL file to execute arbitrary code with the permissions of
the user running RealPlayer. (CVE-2007-3410)
All users of RealPlayer are advised to upgrade to this updated package
containing RealPlayer version 10.0.9 which is not vulnerable to this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | i386 | realplayer | < 10.0.9-3.el5 | RealPlayer-10.0.9-3.el5.i386.rpm |
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.963 High
EPSS
Percentile
99.4%