CVEvulnerability
CVE-2007-2263
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
Affected configurations
• realnetworks realone player
• realnetworks realone player 2.0
• realnetworks realplayer 10.0
• realnetworks realplayer 10.1
• realnetworks realplayer 10.5
• realnetworks realplayer enterprise
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/38344 osvdb.org
- http://secunia.com/advisories/27361 Patch, Vendor Advisory
- http://service.real.com/realplayer/security/10252007_player/en/ Patch
- http://www.attrition.org/pipermail/vim/2007-October/001841.html www.attrition.org
- http://www.securityfocus.com/archive/1/483110/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26214 Patch
- http://www.securityfocus.com/bid/26284 www.securityfocus.com
- http://www.securitytracker.com/id?1018866 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3628 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-061.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37436 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432 oval.cisecurity.org
- http://osvdb.org/38344 osvdb.org
- http://secunia.com/advisories/27361 Patch, Vendor Advisory
- http://service.real.com/realplayer/security/10252007_player/en/ Patch
- http://www.attrition.org/pipermail/vim/2007-October/001841.html www.attrition.org
- http://www.securityfocus.com/archive/1/483110/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26214 Patch
- http://www.securityfocus.com/bid/26284 www.securityfocus.com
- http://www.securitytracker.com/id?1018866 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3628 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-061.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37436 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432 oval.cisecurity.org