CVE-2007-5601
EXPLOITEDRealnetworks Realplayer - Memory Corruption
Title source: ruleDescription
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16497
exploitdb
WORKING POC
VERIFIED
by anonymous · javascriptremotewindows
https://www.exploit-db.com/exploits/30692
metasploit
WORKING POC
NORMAL
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/realplayer_import.rb
References (10)
Scores
EPSS
0.6796
EPSS Percentile
98.6%
Details
VulnCheck KEV
2010-05-01
CWE
CWE-119
Status
published
Products (3)
realnetworks/realplayer
10.0
realnetworks/realplayer
10.5
realnetworks/realplayer
11_beta
Published
Oct 20, 2007
Tracked Since
Feb 18, 2026