CVEvulnerability

CVE-2006-6847

5.0 MEDIUM Published 2006-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument.

Affected configurations

• realnetworks realplayer 10.5 • realnetworks realplayer 10.5 6.0.12.1016 beta • realnetworks realplayer 10.5 6.0.12.1040 • realnetworks realplayer 10.5 6.0.12.1053 • realnetworks realplayer 10.5 6.0.12.1056 • realnetworks realplayer 10.5 6.0.12.1059 • realnetworks realplayer 10.5 6.0.12.1069 • realnetworks realplayer 10.5 6.0.12.1235

References

http://downloads.securityfocus.com/vulnerabilities/exploits/21802.html Exploit
http://www.securityfocus.com/bid/21802 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/31141 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/3030 www.exploit-db.com
http://downloads.securityfocus.com/vulnerabilities/exploits/21802.html Exploit
http://www.securityfocus.com/bid/21802 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/31141 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/3030 www.exploit-db.com