Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-3410

Опубликовано: 26 июн. 2007
Источник: nvd
CVSS2: 9.3
EPSS Средний

Описание

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:helix_player:10.0.5:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_player:10.0.6:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_player:10.0.7:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_player:10.0.8:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_player:10.5-gold:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.1:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.29384
Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 18 лет назад

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

redhat
около 18 лет назад

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

debian
около 18 лет назад

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue ...

github
больше 3 лет назад

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

EPSS

Процентиль: 96%
0.29384
Средний

9.3 Critical

CVSS2

Дефекты

CWE-119