Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2007-5080

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.

  • Published: Oct 31, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-5080
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
realnetworks / realplayer 10.5-6.0.12.1040 10.5-6.0.12.1040.x
realnetworks / realplayer 10.5-6.0.12.1741 10.5-6.0.12.1741.x
realnetworks / realone_player 2.0 2.0.x
realnetworks / realone_player 1.0 1.0.x
realnetworks / realplayer_enterprise - -
realnetworks / realplayer 10.5-6.0.12.1578 10.5-6.0.12.1578.x
realnetworks / realplayer 10.5-6.0.12.1698 10.5-6.0.12.1698.x
realnetworks / realplayer 10.0 10.0.x