Unrated severityNVD Advisory· Published Oct 31, 2007· Updated Jun 16, 2026
CVE-2007-2263
CVE-2007-2263
Description
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:realnetworks:realone_player:2.0:*:windows:*:*:*:*:*+ 2 more
- cpe:2.3:a:realnetworks:realone_player:2.0:*:windows:*:*:*:*:*
- cpe:2.3:a:realnetworks:realone_player:*:*:mac:en:*:*:*:*
- (no CPE)
cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.305:mac:*:*:*:*:*+ 16 more
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.305:mac:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.331:mac:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.0.352:mac:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.5:linux:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.6:linux:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.7:linux:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.8:linux:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:10.0.9:linux:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.0:*:windows:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.1:10.0.0.396:mac:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.1:10.0.0.412:mac:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1040:windows:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1578:windows:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1698:windows:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer:10.5:6.0.12.1741:windows:*:*:*:*:*
- cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:windows:en:*:*:*:*
- (no CPE)range: 10.0, 10.1, 10.5
Patches
Vulnerability mechanics
References
12- secunia.com/advisories/27361nvdPatchVendor Advisory
- service.real.com/realplayer/security/10252007_player/en/nvdPatch
- www.securityfocus.com/bid/26214nvdPatch
- www.vupen.com/english/advisories/2007/3628nvdVendor Advisory
- osvdb.org/38344nvd
- www.attrition.org/pipermail/vim/2007-October/001841.htmlnvd
- www.securityfocus.com/archive/1/483110/100/0/threadednvd
- www.securityfocus.com/bid/26284nvd
- www.securitytracker.com/idnvd
- www.zerodayinitiative.com/advisories/ZDI-07-061.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/37436nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432nvd
News mentions
0No linked articles in our index yet.