PT-2007-7113 · Realnetworks · Realplayer
CVE-2007-6224
·
Published
2007-12-04
·
Updated
2024-02-14
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
RealPlayer version 11
Description
The issue allows remote attackers to cause a denial of service, resulting in a browser crash, by providing a certain argument to the
GetSourceTransport method in the RealAudioObjects.RealAudio ActiveX control.Recommendations
For RealPlayer version 11, consider disabling the
GetSourceTransport method as a temporary workaround until a patch is available. Restrict access to the rmoc3260.dll library to minimize the risk of exploitation.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Realplayer