Vulnerability in N/a
CVE-2008-1309
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory…
EPSS: 0.748 (98.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- realplayer-realaudioobjects-code-execution(41087) (vdb-entry, x_refsource_XF)
- ADV-2008-2194 (vdb-entry, x_refsource_VUPEN)
- service.real.com/realplayer/security/07252008_player/en/ (x_refsource_CONFIRM)
- 29315 (x_refsource_SECUNIA, third-party-advisory)
- 20080310 Real Networks RealPlayer ActiveX Control Heap Corruption (mailing-list, x_refsource_FULLDISC)
- 1019576 (vdb-entry, x_refsource_SECTRACK)
- 5332 (exploit, x_refsource_EXPLOIT-DB)
- ADV-2008-0842 (vdb-entry, x_refsource_VUPEN)
- www.zerodayinitiative.com/advisories/ZDI-08-047/ (x_refsource_MISC)
- VU#831457 (x_refsource_CERT-VN, third-party-advisory)
Frequently asked questions
- What is CVE-2008-1309?
- CVE-2008-1309 is a vulnerability in N/a. Published 2008-03-12.
- Is CVE-2008-1309 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.