Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/27248 | third-party-advisory x_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/871673 | third-party-advisory x_refsource_CERT-VN |
| http://www.securitytracker.com/id?1018843 | vdb-entry x_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2007/3548 | vdb-entry x_refsource_VUPEN |
| http://www.infosecblog.org/2007/10/nasa-bans-ie.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/26130 | vdb-entry x_refsource_BID |
| http://www.symantec.com/enterprise/security_response/weblog/2007/10/realplayer_exploit_on_the_loos.html | x_refsource_MISC |
| http://www.us-cert.gov/cas/techalerts/TA07-297A.html | third-party-advisory x_refsource_CERT |
| http://service.real.com/realplayer/security/191007_player/en/ | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/37280 | vdb-entry x_refsource_XF |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/27248 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.kb.cert.org/vuls/id/871673 | third-party-advisory x_refsource_CERT-VN x_transferred |
| http://www.securitytracker.com/id?1018843 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www.vupen.com/english/advisories/2007/3548 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www.infosecblog.org/2007/10/nasa-bans-ie.html | x_refsource_MISC x_transferred |
| http://www.securityfocus.com/bid/26130 | vdb-entry x_refsource_BID x_transferred |
| http://www.symantec.com/enterprise/security_response/weblog/2007/10/realplayer_exploit_on_the_loos.html | x_refsource_MISC x_transferred |
| http://www.us-cert.gov/cas/techalerts/TA07-297A.html | third-party-advisory x_refsource_CERT x_transferred |
| http://service.real.com/realplayer/security/191007_player/en/ | x_refsource_CONFIRM x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/37280 | vdb-entry x_refsource_XF x_transferred |
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 9.3 | HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Not vulnerable. This issue did not affect versions of RealPlayer as shipped with Red Hat Enterprise Linux 3 and 4 Extras or with Red Hat Enterprise Linux 5 Supplementary.