CVE

Id
28437  
CVE No.
CVE-2007-5080  
Status
Candidate  
Description
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.  
Phase
Assigned (20070924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295443 28437 CVE-2007-5080 MISC:http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/  View
295444 28437 CVE-2007-5080 CONFIRM:http://service.real.com/realplayer/security/10252007_player/en/  View
295445 28437 CVE-2007-5080 CERT-VN:VU#759385  View
295446 28437 CVE-2007-5080 URL:http://www.kb.cert.org/vuls/id/759385  View
295447 28437 CVE-2007-5080 VIM:20071030 RealPlayer Updates of October 25, 2007  View
295448 28437 CVE-2007-5080 URL:http://www.attrition.org/pipermail/vim/2007-October/001841.html  View
295449 28437 CVE-2007-5080 BID:26214  View
295450 28437 CVE-2007-5080 URL:http://www.securityfocus.com/bid/26214  View
295451 28437 CVE-2007-5080 VUPEN:ADV-2007-3628  View
295452 28437 CVE-2007-5080 URL:http://www.vupen.com/english/advisories/2007/3628  View
295453 28437 CVE-2007-5080 SECTRACK:1018866  View
295454 28437 CVE-2007-5080 URL:http://www.securitytracker.com/id?1018866  View
295455 28437 CVE-2007-5080 SECUNIA:27361  View
295456 28437 CVE-2007-5080 URL:http://secunia.com/advisories/27361  View
295457 28437 CVE-2007-5080 XF:realplayer-mp3-bo(37434)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53993 JVNDB-2007-002685 CA BrightStor HSM におけるスタックベースのバッファオーバーフローの脆弱性 Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) には、パラメータを検証しない不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-5082 28437 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002685.html  View