Description
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | RealPlayer | 10.0.9-3.el5 | RHSA-2007:0841 |
| RHEL 3 | realplayer | 10.0.9-0.rhel3.4 | RHSA-2007:0841 |
Advisories 1
- RHSA-2007:0841 Red Hat Security Advisory: RealPlayer security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- http://service.real.com/realplayer/security/10252007_player/en/
- http://www.zerodayinitiative.com/advisories/ZDI-07-063.html
- 1018866 vdb-entry
- realplayer-ram-bo(37437) vdb-entry
- 20071031 ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability mailing-list
- 20071030 RealPlayer Updates of October 25, 2007 mailing-list
- ADV-2007-3628 vdb-entry
- oval:org.mitre.oval:def:9100 vdb-entry signature
- 27361 third-party-advisory
- 26214 vdb-entry