Description
Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | RealPlayer-uninstall | 10.0.9-4.el5 | RHSA-2008:0812 |
| RHEL 4 | RealPlayer-uninstall | 10.0.9-3 | RHSA-2008:0812 |
| RHEL 3 | realplayer-uninstall | 10.0.9-0.rhel3.7 | RHSA-2008:0812 |
Advisories 1
- RHSA-2008:0812 Red Hat Security Advisory: RealPlayer security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 4048 third-party-advisory
- realplayer-swf-frame-bo(43996) vdb-entry
- ADV-2008-2194 vdb-entry
- 31321 third-party-advisory
- 20080725 Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow mailing-list
- http://service.real.com/realplayer/security/07252008_player/en/
- 1020562 vdb-entry
- 27620 third-party-advisory
- RHSA-2008:0812 vendor-advisory
- 30370 vdb-entry
- VU#298651 third-party-advisory
- SUSE-SR:2009:011 vendor-advisory
- http://secunia.com/secunia_research/2007-93/advisory/
- 35416 third-party-advisory