CVE-2008-3066 Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to exe...
HighCVSS 9.3
EPSS 9.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realplayer | = 10.0 | No fix listed |
| realnetworks realplayer | = 10.5 | No fix listed |
References
- 1020565 vdb-entry
- service.real.com
- VU#461187 third-party-advisory us-government-resource
- 20080725 http://www.zerodayinitiative.com/advisories/ZDI-08-046 mailing-list
- 30376 vdb-entry
- 30379 vdb-entry
- ADV-2008-2194 vdb-entry
- www.zerodayinitiative.com
- realplayer-rjbdll-activex-bo(44013) vdb-entry