Login Request a demo
Unscored severity · published Mar 23, 2006
CVE-2006-0323
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to…
–
CVSS
16.7%
EPSS
No
On KEV
Description
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Helix Player · Realnetworks
All versions, or not specified · source: NVD
RP
Realone Player · Realnetworks
All versions, or not specified · source: NVD
RE
Realplayer · Realnetworks
10.0; 10.0.6; 10.5 · source: NVD
RH
Rhapsody · Realnetworks
3 · source: NVD
Affected product
HP
Helix Player
Realnetworks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0323
Vendor Advisory
http://secunia.com/advisories/19358
Patch
http://secunia.com/advisories/19362
Patch
http://secunia.com/advisories/19365
Vendor Advisory
http://secunia.com/advisories/19390
securityreason.com
http://securityreason.com/securityalert/690
securitytracker.com
http://securitytracker.com/id?1015806
More from Helix Player
–
CVE-2010-0417
Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute…
–
CVE-2010-0416
Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to…
–
CVE-2009-4257
Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0…
–
CVE-2009-4248
Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through…
–
CVE-2009-4247
Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0…