CVE-2007-5080 Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an....
HighCVSS 9.3
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realone player | = 1.0 | No fix listed |
| realnetworks realone player | = 2.0 | No fix listed |
| realnetworks realplayer | = 10.0 | No fix listed |
| realnetworks realplayer | = 10.5-6.0.12.1040 | No fix listed |
| realnetworks realplayer | = 10.5-6.0.12.1578 | No fix listed |
| realnetworks realplayer | = 10.5-6.0.12.1698 | No fix listed |
| realnetworks realplayer | = 10.5-6.0.12.1741 | No fix listed |
| realnetworks realplayer enterprise | All versions | No fix listed |
References
- 27361 patch third-party-advisory vendor-advisory
- service.real.com patch
- 20071030 RealPlayer Updates of October 25, 2007 mailing-list
- VU#759385 third-party-advisory us-government-resource
- www.ngssoftware.com
- 26214 vdb-entry
- 1018866 vdb-entry
- ADV-2007-3628 vdb-entry
- realplayer-mp3-bo(37434) vdb-entry