CVE-2007-5080

CVE-2007-5080

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.7%
exploitation probability
7.7%top 5% of all CVEs
observed exploitation
nono source reports it
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.
Affected products
n/a · n/a
References
http://secunia.com/advisories/27361http://service.real.com/realplayer/security/10252007_player/en/https://exchange.xforce.ibmcloud.com/vulnerabilities/37434http://www.attrition.org/pipermail/vim/2007-October/001841.htmlhttp://www.kb.cert.org/vuls/id/759385http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/http://www.securityfocus.com/bid/26214http://www.securitytracker.com/id?1018866http://www.vupen.com/english/advisories/2007/3628