vulnwire
9.3crit

CVE-2008-1309in critical feed3 exploits

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
46.0%
percentile 99%
Public exploits
3
Metasploit · Exploit-DB

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory.

Exploit prediction (EPSS)

45.95% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/browser/realplayer_console RealPlayer rmoc3260.dll ActiveX Control Heap Corruption · metasploit exploit, normal rank · 2008-03-08
  • EDB-5332 Real Player - 'rmoc3260.dll' ActiveX Control Remote Code Execution · remote · 2008-04-01
  • EDB-16584 RealPlayer - 'rmoc3260.dll' ActiveX Control Heap Corruption (Metasploit) · remote · 2010-06-15

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/41087 · vdb-entry, x_refsource_XF, x_transferred
  • vupen.com /english/advisories/2008/2194/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • service.real.com /realplayer/security/07252008_player/en/ · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/29315 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2008-March/060659.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • securitytracker.com /id?1019576 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exploit-db.com /exploits/5332 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • vupen.com /english/advisories/2008/0842 · vdb-entry, x_refsource_VUPEN, x_transferred
  • zerodayinitiative.com /advisories/ZDI-08-047/ · x_refsource_MISC, x_transferred
  • kb.cert.org /vuls/id/831457 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /archive/1/494779/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securitytracker.com /id?1020563 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /bid/28157 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.