CVE-2007-4904 RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (appl...
MediumCVSS 4.3
EPSS 2.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks helix player | = 1.0.6 | No fix listed |
| realnetworks realplayer | = 10.0.8 | No fix listed |
| realnetworks realplayer | = 10.0.9 | No fix listed |
| realnetworks realplayer | = 10.1 | No fix listed |
| realnetworks realplayer | = 10.5-gold | No fix listed |
References
- 20070911 RealPlayer/HelixPlayer .au Divide-By-Zero Denial of Service Vulnerability mailing-list
- 39904 vdb-entry
- 20070911 RealPlayer/HelixPlayer .au Divide-By-Zero Denial of Service Vulnerability mailing-list
- 25627 exploit vdb-entry
- realplayer-helixplayer-au-dos(36545) vdb-entry