NVD

Id
55562  
Name
CVE-2007-3410  
Description
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-26  
Modified Date
2012-10-30  
Seq
2007-3410  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282546 55562 CVE-2007-3410 20070626 RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability  View
282547 55562 CVE-2007-3410 oval:org.mitre.oval:def:10554  View
282548 55562 CVE-2007-3410 GLSA-200709-05  View
282549 55562 CVE-2007-3410 1018297  View
282550 55562 CVE-2007-3410 1018299  View
282551 55562 CVE-2007-3410 http://service.real.com/realplayer/security/10252007_player/en/  View
282552 55562 CVE-2007-3410 20071030 RealPlayer Updates of October 25, 2007  View
282553 55562 CVE-2007-3410 VU#770904  View
282554 55562 CVE-2007-3410 RHSA-2007:0605  View
282555 55562 CVE-2007-3410 RHSA-2007:0841  View
282556 55562 CVE-2007-3410 24658  View
282557 55562 CVE-2007-3410 ADV-2007-2339  View
282558 55562 CVE-2007-3410 ADV-2007-3628  View
282559 55562 CVE-2007-3410 realplayer-smiltime-wallclockvalue-bo(35088)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51820 JVNDB-2007-000483 RealNetworks RealPlayer および HelixPlayer における SMIL ファイル処理のバッファオーバーフローの脆弱性 RealNetworks RealPlayer および HelixPlayer における wallclock() 関数には、SMIL ファイルの時間フォーマットデータの処理においてバッファオーバーフローの脆弱性が存在します。 CVE-2007-3410 26765 CVE-2007-3410 55562 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000483.html 2007-06-26 2007-11-08 View