Lucene search

K
cveFlexeraCVE-2007-5400
HistoryJul 28, 2008 - 5:41 p.m.

CVE-2007-5400

2008-07-2817:41:00
CWE-119
flexera
web.nvd.nist.gov
36
cve-2007-5400
buffer overflow
realplayer
swf
remote code execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.772

Percentile

98.2%

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

Affected configurations

Nvd
Node
realrealplayerMatch10.1
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.5
VendorProductVersionCPE
realrealplayer10.1cpe:2.3:a:real:realplayer:10.1:*:*:*:*:*:*:*
realnetworksrealplayer10.0cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.772

Percentile

98.2%