VDB
CVE-2007-4904
CVE-2007-4904
PUBLISHED
CVSS 4.300000190734863 MEDIUM
RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.
EPSS 5.58% · 90.5th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
5.58%
90.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| realnetworks | realplayer | 10.0.8, 10.0.9, 10.1 |
| realnetworks | helix_player | 1.0.6 |
Timeline
- Sep 17, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- realplayer-helixplayer-au-dos(36545) vdb
- 20070911 RealPlayer/HelixPlayer .au Divide-By-Zero Denial of Service Vulnerability mailing-list
- 25627 vdb
- 20070911 RealPlayer/HelixPlayer .au Divide-By-Zero Denial of Service Vulnerability mailing-list
- 39904 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2007-4904 advisory