CVE-2007-2263

CVE-2007-2263

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.3%
exploitation probability
7.3%top 6% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
Affected products
n/a · n/a
References
http://osvdb.org/38344http://secunia.com/advisories/27361http://service.real.com/realplayer/security/10252007_player/en/https://exchange.xforce.ibmcloud.com/vulnerabilities/37436https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432http://www.attrition.org/pipermail/vim/2007-October/001841.htmlhttp://www.securityfocus.com/archive/1/483110/100/0/threadedhttp://www.securityfocus.com/bid/26214http://www.securityfocus.com/bid/26284http://www.securitytracker.com/id?1018866http://www.vupen.com/english/advisories/2007/3628http://www.zerodayinitiative.com/advisories/ZDI-07-061.html