CVE-2007-2263

Summary

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://service.real.com/realplayer/security/10252007_player/en/
• http://www.zerodayinitiative.com/advisories/ZDI-07-061.html
• http://osvdb.org/38344
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37436
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432
• http://www.securityfocus.com/archive/1/483110/100/0/threaded
• http://www.securitytracker.com/id?1018866
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.vupen.com/english/advisories/2007/3628
• http://www.securityfocus.com/bid/26284
• http://secunia.com/advisories/27361
• http://www.securityfocus.com/bid/26214

References

• http://service.real.com/realplayer/security/10252007_player/en/
• http://www.zerodayinitiative.com/advisories/ZDI-07-061.html
• http://osvdb.org/38344
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37436
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432
• http://www.securityfocus.com/archive/1/483110/100/0/threaded
• http://www.securitytracker.com/id?1018866
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.vupen.com/english/advisories/2007/3628
• http://www.securityfocus.com/bid/26284
• http://secunia.com/advisories/27361
• http://www.securityfocus.com/bid/26214

• ←Previous
• Next→