NetSight
IP …
medium4.3Public exploit code

CVE-2007-4904

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote att…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.

Affected products

VendorProductAffected versions
RealnetworksHelix Player
Version 1.0.6
RealnetworksRealplayer
Versions 10.0.8, 10.0.9, 10.1, 10.5-gold

Weakness classification

CWE-189

References