CVE-2007-2263: Buffer Overflow
Published Oct 31, 2007
·Updated
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
Affected Software
18 affected components
RealNetworks RealOne Player
RealNetworks RealOne Player=2.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0-10.0.0.305
RealNetworks RealPlayer=10.0-10.0.0.331
RealNetworks RealPlayer=10.0-10.0.0.352
RealNetworks RealPlayer=10.0-10.0.5
RealNetworks RealPlayer=10.0-10.0.6
RealNetworks RealPlayer=10.0-10.0.7
RealNetworks RealPlayer=10.0-10.0.8
RealNetworks RealPlayer=10.0-10.0.9
RealNetworks RealPlayer=10.1-10.0.0.396
RealNetworks RealPlayer=10.1-10.0.0.412
RealNetworks RealPlayer=10.5-6.0.12.1040
RealNetworks RealPlayer=10.5-6.0.12.1578
RealNetworks RealPlayer=10.5-6.0.12.1698
RealNetworks RealPlayer=10.5-6.0.12.1741
RealNetworks RealPlayer Enterprise
Remediation
Patch Available
Patch Available
Event History
Oct 31, 2007
CVE Published
05:46 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2263?
CVE-2007-2263 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2007-2263?
To mitigate CVE-2007-2263, users should update RealPlayer to the latest version provided by RealNetworks.
3
What versions are affected by CVE-2007-2263?
CVE-2007-2263 affects RealPlayer versions 10.0, 10.1, and 10.5, as well as RealOne Player and RealPlayer Enterprise.
4
What type of vulnerability is CVE-2007-2263?
CVE-2007-2263 is a heap-based buffer overflow vulnerability.
5
Can CVE-2007-2263 be exploited via a network?
Yes, CVE-2007-2263 can be exploited remotely through specially crafted SWF files.