medium5.0Public exploit code
CVE-2006-6847
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invokin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RealPlayer 10.5 'ierpplug.dll' Internet Explorer 7 - Denial of Service2006-12-28 · dos · windows · Verified
Impact
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Realplayer | Versions 10.5, 10.5_6.0.12.1016_beta, 10.5_6.0.12.1040, 10.5_6.0.12.1053, 10.5_6.0.12.1056, 10.5_6.0.12.1059 |
References
- NVD record
- CVE.org record
- http://downloads.securityfocus.com/vulnerabilities/exploits/21802.html
- http://www.securityfocus.com/bid/21802
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31141
- https://www.exploit-db.com/exploits/3030
- http://downloads.securityfocus.com/vulnerabilities/exploits/21802.html
- http://www.securityfocus.com/bid/21802
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31141
- https://www.exploit-db.com/exploits/3030