CVE

Id
25620  
CVE No.
CVE-2007-2263  
Status
Candidate  
Description
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
256115 25620 CVE-2007-2263 BUGTRAQ:20071031 ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability  View
256116 25620 CVE-2007-2263 URL:http://www.securityfocus.com/archive/1/archive/1/483110/100/0/threaded  View
256117 25620 CVE-2007-2263 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-061.html  View
256118 25620 CVE-2007-2263 CONFIRM:http://service.real.com/realplayer/security/10252007_player/en/  View
256119 25620 CVE-2007-2263 VIM:20071030 RealPlayer Updates of October 25, 2007  View
256120 25620 CVE-2007-2263 URL:http://www.attrition.org/pipermail/vim/2007-October/001841.html  View
256121 25620 CVE-2007-2263 BID:26214  View
256122 25620 CVE-2007-2263 URL:http://www.securityfocus.com/bid/26214  View
256123 25620 CVE-2007-2263 BID:26284  View
256124 25620 CVE-2007-2263 URL:http://www.securityfocus.com/bid/26284  View
256125 25620 CVE-2007-2263 OVAL:oval:org.mitre.oval:def:11432  View
256126 25620 CVE-2007-2263 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11432  View
256127 25620 CVE-2007-2263 VUPEN:ADV-2007-3628  View
256128 25620 CVE-2007-2263 URL:http://www.vupen.com/english/advisories/2007/3628  View
256129 25620 CVE-2007-2263 OSVDB:38344  View
256130 25620 CVE-2007-2263 URL:http://osvdb.org/38344  View
256131 25620 CVE-2007-2263 SECTRACK:1018866  View
256132 25620 CVE-2007-2263 URL:http://www.securitytracker.com/id?1018866  View
256133 25620 CVE-2007-2263 SECUNIA:27361  View
256134 25620 CVE-2007-2263 URL:http://secunia.com/advisories/27361  View
256135 25620 CVE-2007-2263 XF:realplayer-swf-bo(37436)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56764 JVNDB-2007-005456 YA Book におけるクロスサイトスクリプティングの脆弱性 YA Book には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2265 25620 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005456.html  View