CVE-2006-0323

CRITICAL 9.3CVE-2006-0323 · Published 23/03/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
realplayer realnetworks	`= 10.0= 10.0.6= 10.5`	No fix yet
rhapsody realnetworks	`= 3`	No fix yet

Description

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

References

secunia.com/advisories/19358 · Vendor Advisory
secunia.com/advisories/19362 · Patch
secunia.com/advisories/19365 · Patch
secunia.com/advisories/19390 · Vendor Advisory
securityreason.com/securityalert/690
securitytracker.com/id
gentoo.org/security/en/glsa/glsa-200603-24.xml · Patch
kb.cert.org/vuls/id/231028 · Patch
novell.com/linux/security/advisories/2006_18_realplayer.html · Patch
redhat.com/support/errata/RHSA-2006-0257.html · Patch
securityfocus.com/archive/1/430621/100/0/threaded
securityfocus.com/bid/17202 · Exploit
service.real.com/realplayer/security/03162006_player/en · Patch
vupen.com/english/advisories/2006/1057
exchange.xforce.ibmcloud.com/vulnerabilities/25408

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free