Unscored severity · published Jun 26, 2007
CVE-2007-3410
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer…
–
CVSS
36.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.
Exploitation
Is it being used?
Exploit prediction (EPSS)36.1% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Helix Player · Realnetworks
10.0.5; 10.0.6; 10.0.7; 10.0.8; 10.5-gold · source: NVD
RP
Realone Player · Realnetworks
All versions, or not specified · source: NVD
RE
Realplayer · Realnetworks
10.0; 10.1; 10.5 · source: NVD
RE
Realplayer Enterprise · Realnetworks
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3410
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3410
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547
osvdb.org
http://osvdb.org/37374
osvdb.org
http://osvdb.org/38342
Vendor Advisory
http://secunia.com/advisories/25819
Vendor Advisory
http://secunia.com/advisories/25859
Vendor Advisory
http://secunia.com/advisories/26463
More from Helix Player
–
CVE-2010-0417
Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute…
–
CVE-2010-0416
Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to…
–
CVE-2009-4257
Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0…
–
CVE-2009-4248
Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through…
–
CVE-2009-4247
Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0…