CVE-2007-3410 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3410
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3410

Description: Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35088 VIM http://www.attrition.org/pipermail/vim/2007-October/001841.html ST 1018299 1018297 SAID Secunia Advisory: SA27361 Secunia Advisory: SA26828 Secunia Advisory: SA26463 Secunia Advisory: SA25859 Secunia Advisory: SA25819 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0605.html http://www.redhat.com/support/errata/RHSA-2007-0841.html OSVDB 37374 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547 GENTOO http://security.gentoo.org/glsa/glsa-200709-05.xml CONFIRM http://service.real.com/realplayer/security/10252007_player/en/ CERT-VN 770904 BID 24658

Return to the previous page.