1. CVE-Search
  2. CVE-2006-1370
ID CVE-2006-1370
Summary Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file. This vulnerability affects all versions of RealNetworks, RealPlayer from 10.5 v6.0.12.1040 through 10.5 v6.0.12.1348.
References
Vulnerable Configurations
  • cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1348:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1348:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 20-07-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 17202
cert-vn VU#451556
confirm http://www.service.real.com/realplayer/security/03162006_player/en/
sectrack 1015810
secunia 19358
vupen ADV-2006-1057
xf realnetworks-mbc-bo(25411)
saint via4
bid 17202
description RealPlayer invalid chunk header heap overflow
id misc_realplayer
osvdb 24062
title realplayer_chunk_header
type client
Last major update 20-07-2017 - 01:30
Published 23-03-2006 - 23:06
Last modified 20-07-2017 - 01:30
Back to Top