VDB
CVE-2006-0323
CVE-2006-0323
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.
EPSS 68.47% · 98.6th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
68.47%
98.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| realnetworks | realplayer | 10.0.6, 10.5, 10.0 |
| realnetworks | helix_player | |
| realnetworks | rhapsody | 3 |
| N/A | N/A | |
| n/a | n/a | n/a |
| realnetworks | realone_player |
Timeline
- Mar 23, 2006 CVE Published
- Mar 27, 2006 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- http://www.service.real.com/realplayer/security/03162006_player/en/ url
- 19358 third-party-advisory
- SUSE-SA:2006:018 vendor-advisory
- 19362 third-party-advisory
- ADV-2006-1057 vdb
- RHSA-2006:0257 vendor-advisory
- 690 third-party-advisory
- 19365 third-party-advisory
- GLSA-200603-24 vendor-advisory
- 1015806 vdb
- 17202 vdb
- 20060411 Realplayer .SWF Multiple Remote Memory Corruption Vulnerabilities mailing-list
- realnetworks-swf-bo(25408) vdb
- 19390 third-party-advisory
- VU#231028 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2006-0323 advisory
- http://www.service.real.com/realplayer/security/03162006_player/en url
- http://service.real.com/realplayer/security advisory