CVE-2007-5601
EXPLOITEDRealPlayer - Stack-based Buffer Overflow in Database Component via Playlist Name
Title source: llmExploitation Summary
CVE-2007-5601 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, anonymous, MC, including a Metasploit module exploits/windows/browser/realplayer_import.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in RealPlayer's ActiveX control via the Import() method. It delivers a payload through a malicious HTML page, triggering arbitrary code execution on vulnerable systems.
Description
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in RealPlayer's ActiveX control via the Import() method. It delivers a payload through a malicious HTML page, triggering arbitrary code execution on vulnerable systems.
This exploit targets a stack-based buffer overflow in RealPlayer's ActiveX control (CVE-2007-5601) by crafting a malicious payload delivered via JavaScript. It leverages specific return addresses for different RealPlayer versions and languages to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in RealPlayer's ActiveX control via the Import() method, allowing arbitrary code execution. It targets specific versions of RealOne Player and RealPlayer 10.5 by sending an overly long string to trigger the vulnerability.