CVE-2007-2264
published 2007-10-31CVE-2007-2264: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers…
PriorityP343critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
7.30%
93.6th percentile
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| realnetworks | realone_player | — | — |
| realnetworks | realone_player | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vp7h-3q7r-gx68: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10
ghsa_unreviewed·2022-05-01
CVE-2007-2264 [HIGH] CWE-119 GHSA-vp7h-3q7r-gx68: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.
Red Hat
realplayer ram file heap overflow
vendor_redhat·2007-10-25·CVSS 9.3
CVE-2007-2264 [CRITICAL] realplayer ram file heap overflow
realplayer ram file heap overflow
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/27361http://securitytracker.com/id?1018866http://service.real.com/realplayer/security/10252007_player/en/http://www.attrition.org/pipermail/vim/2007-October/001841.htmlhttp://www.securityfocus.com/archive/1/483113/100/0/threadedhttp://www.securityfocus.com/bid/26214http://www.vupen.com/english/advisories/2007/3628http://www.zerodayinitiative.com/advisories/ZDI-07-063.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/37437https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9100http://secunia.com/advisories/27361http://securitytracker.com/id?1018866http://service.real.com/realplayer/security/10252007_player/en/http://www.attrition.org/pipermail/vim/2007-October/001841.htmlhttp://www.securityfocus.com/archive/1/483113/100/0/threadedhttp://www.securityfocus.com/bid/26214http://www.vupen.com/english/advisories/2007/3628http://www.zerodayinitiative.com/advisories/ZDI-07-063.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/37437https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9100
2007-10-31
Published