CVE-2007-5400 Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realplayer | = 10.1 | No fix listed |
| realnetworks realplayer | = 10.0 | No fix listed |
| realnetworks realplayer | = 10.5 | No fix listed |
References
- SUSE-SR:2009:011 vendor-advisory
- 27620 third-party-advisory vendor-advisory
- 31321 third-party-advisory
- 35416 third-party-advisory
- secunia.com vendor-advisory
- 4048 third-party-advisory
- service.real.com
- VU#298651 third-party-advisory us-government-resource
- RHSA-2008:0812 vendor-advisory
- 20080725 Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow mailing-list
- 30370 vdb-entry
- 1020562 vdb-entry
- ADV-2008-2194 vdb-entry
- realplayer-swf-frame-bo(43996) vdb-entry