Lucene search
RootSSV:3718HistoryJul 28, 2008 - 12:00 a.m.
RealNetworks RealPlayer SWF文件处理堆溢出漏洞
2008-07-2800:00:00
Root
www.seebug.org
12
0.78 High
EPSS
Percentile
97.9%
BUGTRAQ ID: 30370
CVE(CAN) ID: CVE-2007-5400
RealPlayer是一款流行的多媒体播放器。
RealPlayer没有正确地处理Shockwave Flash（SWF）文件中的帧，如果用户受骗打开了恶意的SWF文件的话，就可以触发堆溢出，导致执行任意指令。
Real Networks RealPlayer 10.5 Build 6.0.12.1483
Real Networks
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://www.real.com/realcom/player/security/” target=“_blank”>http://www.real.com/realcom/player/security/</a>
Related
redhat
redhat
(RHSA-2008:0812) Critical: RealPlayer security update
2008-07-31 00:00:00
nessus
nessus
openSUSE 10 Security Update : RealPlayer (RealPlayer-6265)
2009-05-26 00:00:00
openSUSE Security Update : RealPlayer (RealPlayer-906)
2009-07-21 00:00:00
GLSA-200809-03 : RealPlayer: Buffer overflow
2008-09-05 00:00:00
gentoo
gentoo
RealPlayer: Buffer overflow
2008-09-04 00:00:00
Win32 Codecs: User-assisted execution of arbitrary code
2013-12-16 00:00:00
cert
cert
RealNetworks RealPlayer Shockwave Flash (SWF) file vulnerability
2008-07-28 00:00:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow
2008-07-25 00:00:00
prion
prion
Heap overflow
2008-07-28 17:41:00
openvas
openvas
Gentoo Security Advisory GLSA 200809-03 (realplayer)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200809-03 (realplayer)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 201312-11
2015-09-29 00:00:00
cve
cve
CVE-2007-5400
2008-07-28 17:41:00
cvelist
cvelist
CVE-2007-5400
2008-07-28 17:00:00