CVE-2007-2263 : Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 1

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.

Published 2007-10-31 17:46:00

Updated 2018-10-16 16:42:54

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2007-2263

Realnetworks » Realplayer » Version: 10.0 Update 10.0.6 Linux Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.6:linux:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.7 Linux Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.7:linux:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.5 Update 6.0.12.1698 Windows Edition
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1698:windows:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.5 Update 6.0.12.1741 Windows Edition
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1741:windows:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Windows Edition
cpe:2.3:a:realnetworks:realplayer:10.0:*:windows:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.8 Linux Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.8:linux:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.9 Linux Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.9:linux:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.0.352 MAC Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.352:mac:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.5 Linux Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.5:linux:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.5 Update 6.0.12.1040 Windows Edition
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1040:windows:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.5 Update 6.0.12.1578 Windows Edition
cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1578:windows:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.0.305 MAC Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.305:mac:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.0 Update 10.0.0.331 MAC Edition
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.331:mac:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.1 Update 10.0.0.396 MAC Edition
cpe:2.3:a:realnetworks:realplayer:10.1:10.0.0.396:mac:*:*:*:*:*
Matching versions
Realnetworks » Realplayer » Version: 10.1 Update 10.0.0.412 MAC Edition
cpe:2.3:a:realnetworks:realplayer:10.1:10.0.0.412:mac:*:*:*:*:*
Matching versions
Realnetworks » Realone Player » MAC Edition Language EN
cpe:2.3:a:realnetworks:realone_player:*:*:mac:en:*:*:*:*
Matching versions
Realnetworks » Realone Player » Version: 2.0 Windows Edition
cpe:2.3:a:realnetworks:realone_player:2.0:*:windows:*:*:*:*:*
Matching versions
Realnetworks » Realplayer Enterprise » Windows Edition Language EN
cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:windows:en:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-2263

EPSS FAQ

10.00%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2263

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-2263

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

Vendor statements for CVE-2007-2263

Red Hat 2007-11-01

This issue was fixed in RealPlayer for Red Hat Enterprise Linux 3 Extras, 4 Extras, 5 Supplementary by RHSA-2007:0841 on 17th August 2007: http://rhn.redhat.com/errata/RHSA-2007-0841.html)on (Our original advisory did not mention this issue was fixed as the details of the issue were not made public by RealNetworks until 25th October 2007)

References for CVE-2007-2263