Sploitus

10 exploited vulnerabilities in Realone Player

Vulnerabilities with publicly known exploits

Vendors
Realnetworks, Red Hat
With known exploits
10
Affected Realnetworks Realplayer versions
All versions
Affected Realnetworks Helix Player versions
All versions
Affected Realnetworks Realone Player versions
All versions
Affected Realnetworks Realplayer Enterprise versions
All versions
Affected Realnetworks Rhapsody versions
= 3, 3.0, 3.0_build_0.815
Affected Realnetworks Realone Enterprise Desktop versions
= 6.0.11.774
Affected Realnetworks Realone Desktop Manager versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2007-5601 10 exploits
CVSS 9.3 HIGH 2007-10-20FIX AVAILABLE
RealPlayer - 'ierpplug.dll' ActiveX Control Playlist Name Buffer Overflow (Metasploit)RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow
CVE-2007-3410 7 exploits
CVSS 9.3 HIGH 2007-06-26FIX AVAILABLE
RealPlayer SMIL file wallclock buffer overflowRealPlayer SMIL file wallclock buffer overflow
CVE-2006-0323 10 exploits
CVSS 9.3 HIGH 2006-03-23
RealNetworks Multiple Products Multiple Buffer Overflow VulnerabilitiesRealPlayer <= 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow PoC
CVE-2005-2922 4 exploits
CVSS 9.3 HIGH 2005-09-27
RealPlayer invalid chunk header heap overflowRealPlayer invalid chunk header heap overflow
CVE-2018-13121
CVSS 5.5 MEDIUM 2018-07-03FIX AVAILABLE
CVE-2005-2629 1 exploit
CVSS 5.1 MEDIUM 2005-09-27FIX AVAILABLE
RealNetworks RealOne Player/RealPlayer - '.RM' Local Stack Buffer Overflow
CVE-2005-0611
CVSS 5.1 MEDIUM 2005-03-02FIX AVAILABLE
CVE-2005-0455 4 exploits
CVSS 5.1 MEDIUM 2005-03-02FIX AVAILABLE
RealNetworks RealPlayer - '.SMIL' Remote Buffer Overflow (Metasploit)RealNetworks RealPlayer SMIL Buffer Overflow
CVE-2004-1798
CVSS 5.1 MEDIUM 2004-12-31FIX AVAILABLE
CVE-2003-0726 1 exploit
CVSS 5.1 MEDIUM 2003-09-03
RealOne Player 1.0/2.0/6.0.10/6.0.11 - '.SMIL' File Script Execution