Published: 23/03/2006 Updated: 19/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote malicious users to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
realnetworks helix player
realnetworks realone player
realnetworks realplayer 10.0.6
realnetworks realplayer 10.0
realnetworks realplayer 10.5
realnetworks rhapsody 3

RealPlayer versions 105 and below SWF buffer overflow proof of concept exploit ...

source: wwwsecurityfocuscom/bid/17202/info Various RealNetworks products are prone to multiple buffer-overflow vulnerabilities These issues can result in memory corruption and facilitate arbitrary code execution A successful attack can allow remote attackers to execute arbitrary code in the context of the application to gain unauthoriz ...

#!/usr/bin/perl ################################################### # RealPlayer: Buffer overflow vulnerability / PoC # # CVE-2006-0323 # cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2006-0323 # # RealNetworks Advisory # servicerealcom/realplayer/security/03162006_player/en/ # # Federico L Bossi Bonin # fbossi[at]netcommcomar #### ...

CWE-119 http://www.service.real.com/realplayer/security/03162006_player/en/http://securitytracker.com/id?1015806 http://www.novell.com/linux/security/advisories/2006_18_realplayer.html http://www.securityfocus.com/bid/17202 http://secunia.com/advisories/19358 http://www.gentoo.org/security/en/glsa/glsa-200603-24.xml http://www.kb.cert.org/vuls/id/231028 http://secunia.com/advisories/19365 http://secunia.com/advisories/19390 http://www.redhat.com/support/errata/RHSA-2006-0257.html http://secunia.com/advisories/19362 http://securityreason.com/securityalert/690 http://www.vupen.com/english/advisories/2006/1057 https://exchange.xforce.ibmcloud.com/vulnerabilities/25408 http://www.securityfocus.com/archive/1/430621/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/45093/realplayer-swf-PoC.pl.txt.html https://www.exploit-db.com/exploits/27460/https://www.kb.cert.org/vuls/id/231028

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-0323

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect