PT-2007-7113 · Realnetworks · Realplayer

Published 2007-12-04 · Updated 2024-02-14 · CVE-2007-6224

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions RealPlayer version 11

Description The issue allows remote attackers to cause a denial of service, resulting in a browser crash, by providing a certain argument to the GetSourceTransport method in the RealAudioObjects.RealAudio ActiveX control.

Recommendations For RealPlayer version 11, consider disabling the GetSourceTransport method as a temporary workaround until a patch is available. Restrict access to the rmoc3260.dll library to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-6224

Affected Products

Realplayer

References · 6

• 🔥 http://safehack.com/Advisory/realpdos.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6224 · Security Note
• http://securityreason.com/securityalert/3415 · Note
• http://securityfocus.com/bid/26660 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38778 · Note
• http://securityfocus.com/archive/1/484401/100/0/threaded · Note