critical9.3Public exploit code

CVE-2006-0323

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

RealNetworks (Multiple Products) - Multiple Buffer Overflow Vulnerabilities2006-03-23 · dos · multiple · Verified
RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)2006-03-28 · dos · multiple · Verified

Impact

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

Affected products

Vendor	Product	Affected versions
Realnetworks	Helix Player	All versions
Realnetworks	Realone Player	All versions
Realnetworks	Realplayer	Versions 10.0, 10.0.6, 10.5
Realnetworks	Rhapsody	Version 3

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References