CVE-2007-5601

EXPLOITED

Realnetworks Realplayer - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16497
exploitdb WORKING POC VERIFIED
by anonymous · javascriptremotewindows
https://www.exploit-db.com/exploits/30692
metasploit WORKING POC NORMAL
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/realplayer_import.rb

Scores

EPSS 0.6796
EPSS Percentile 98.6%

Details

VulnCheck KEV 2010-05-01
CWE
CWE-119
Status published
Products (3)
realnetworks/realplayer 10.0
realnetworks/realplayer 10.5
realnetworks/realplayer 11_beta
Published Oct 20, 2007
Tracked Since Feb 18, 2026