CVE

Id
25621  
CVE No.
CVE-2007-2264  
Status
Candidate  
Description
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
256136 25621 CVE-2007-2264 BUGTRAQ:20071031 ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability  View
256137 25621 CVE-2007-2264 URL:http://www.securityfocus.com/archive/1/archive/1/483113/100/0/threaded  View
256138 25621 CVE-2007-2264 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-063.html  View
256139 25621 CVE-2007-2264 CONFIRM:http://service.real.com/realplayer/security/10252007_player/en/  View
256140 25621 CVE-2007-2264 VIM:20071030 RealPlayer Updates of October 25, 2007  View
256141 25621 CVE-2007-2264 URL:http://www.attrition.org/pipermail/vim/2007-October/001841.html  View
256142 25621 CVE-2007-2264 BID:26214  View
256143 25621 CVE-2007-2264 URL:http://www.securityfocus.com/bid/26214  View
256144 25621 CVE-2007-2264 OVAL:oval:org.mitre.oval:def:9100  View
256145 25621 CVE-2007-2264 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9100  View
256146 25621 CVE-2007-2264 VUPEN:ADV-2007-3628  View
256147 25621 CVE-2007-2264 URL:http://www.vupen.com/english/advisories/2007/3628  View
256148 25621 CVE-2007-2264 SECTRACK:1018866  View
256149 25621 CVE-2007-2264 URL:http://securitytracker.com/id?1018866  View
256150 25621 CVE-2007-2264 SECUNIA:27361  View
256151 25621 CVE-2007-2264 URL:http://secunia.com/advisories/27361  View
256152 25621 CVE-2007-2264 XF:realplayer-ram-bo(37437)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56765 JVNDB-2007-005457 Progress Webspeed Messenger における任意のファイルを実行される脆弱性 Progress Webspeed Messenger には、任意のファイルを読み込み、作成、変更、および実行される脆弱性が存在します。 CVE-2007-2266 25621 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005457.html  View