PT-2007-7124 · Realnetworks · Realplayer

·

CVE-2007-6235

·

Published

2007-12-04

·

Updated

2024-02-14

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions RealPlayer version 11
Description A certain ActiveX control in RealPlayer allows remote attackers to cause a denial of service, resulting in an application crash, via a malformed .au file that triggers a divide-by-zero error.
Recommendations For RealPlayer version 11, consider avoiding the use of the affected ActiveX control until a patch is available. As a temporary workaround, refrain from opening malformed .au files to minimize the risk of exploitation.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2007-6235

Affected Products

Realplayer