CVE-2007-2264

Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.

• CWE-119

• http://secunia.com/advisories/27361Patch, Vendor Advisory
• http://securitytracker.com/id?1018866Patch
• http://service.real.com/realplayer/security/10252007_player/en/
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.securityfocus.com/archive/1/483113/100/0/threaded
• http://www.securityfocus.com/bid/26214Patch
• http://www.vupen.com/english/advisories/2007/3628Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-063.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37437
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9100
• http://secunia.com/advisories/27361Patch, Vendor Advisory
• http://securitytracker.com/id?1018866Patch
• http://service.real.com/realplayer/security/10252007_player/en/
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.securityfocus.com/archive/1/483113/100/0/threaded
• http://www.securityfocus.com/bid/26214Patch
• http://www.vupen.com/english/advisories/2007/3628Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-063.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37437
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9100

Published

Oct 31, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2258PHP remote file inclusion vulnerability in includes/init.inc…
• CVE-2007-2259SQL injection vulnerability in forum.php in EsForum 3.0 allo…
• CVE-2007-2260Multiple PHP remote file inclusion vulnerabilities in bibtex…
• CVE-2007-2261PHP remote file inclusion vulnerability in espaces/communiqu…
• CVE-2007-2262Multiple PHP remote file inclusion vulnerabilities in html/p…
• CVE-2007-2263Heap-based buffer overflow in RealNetworks RealPlayer 10.0, …
• CVE-2007-2265Cross-site scripting (XSS) vulnerability in YA Book 0.98-alp…
• CVE-2007-2266Progress Webspeed Messenger allows remote attackers to read,…
• CVE-2007-2267Unspecified vulnerability in Sun Cluster 3.1 and Solaris Clu…
• CVE-2007-2268Multiple directory traversal vulnerabilities in SWsoft Plesk…
• CVE-2007-2269Directory traversal vulnerability in top.php3 in SWsoft Ples…
• CVE-2007-2270The Linksys SPA941 VoIP Phone allows remote attackers to cau…