CVE-2006-0323

Description

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory, US Government Resource
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org
• cve@mitre.org — Exploit