CVE-2007-5400

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
• http://secunia.com/advisories/27620Vendor Advisory
• http://secunia.com/advisories/31321
• http://secunia.com/advisories/35416
• http://secunia.com/secunia_research/2007-93/advisory/Vendor Advisory
• http://securityreason.com/securityalert/4048
• http://service.real.com/realplayer/security/07252008_player/en/
• http://www.kb.cert.org/vuls/id/298651US Government Resource
• http://www.redhat.com/support/errata/RHSA-2008-0812.html
• http://www.securityfocus.com/archive/1/494749/100/0/threaded
• http://www.securityfocus.com/bid/30370
• http://www.securitytracker.com/id?1020562
• http://www.vupen.com/english/advisories/2008/2194/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43996
• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
• http://secunia.com/advisories/27620Vendor Advisory
• http://secunia.com/advisories/31321
• http://secunia.com/advisories/35416
• http://secunia.com/secunia_research/2007-93/advisory/Vendor Advisory
• http://securityreason.com/securityalert/4048
• http://service.real.com/realplayer/security/07252008_player/en/
• http://www.kb.cert.org/vuls/id/298651US Government Resource
• http://www.redhat.com/support/errata/RHSA-2008-0812.html
• http://www.securityfocus.com/archive/1/494749/100/0/threaded
• http://www.securityfocus.com/bid/30370
• http://www.securitytracker.com/id?1020562
• http://www.vupen.com/english/advisories/2008/2194/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43996

Published

Jul 28, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5394Stack-based buffer overflow in AldFs32.dll in Adobe PageMake…
• CVE-2007-5395Stack-based buffer overflow in the separate_word function in…
• CVE-2007-5396Format string vulnerability in the ext_yahoo_contact_added f…
• CVE-2007-5397Heap-based buffer overflow in the activePDF Server service (…
• CVE-2007-5398Stack-based buffer overflow in the reply_netbios_packet func…
• CVE-2007-5399Multiple heap-based buffer overflows in emlsr.dll in the EML…
• CVE-2007-5401Unrestricted file upload vulnerability in uploadrequest.asp …
• CVE-2007-5402Multiple SQL injection vulnerabilities in Layton HelpBox 3.7…
• CVE-2007-5403Multiple cross-site scripting (XSS) vulnerabilities in Layto…
• CVE-2007-5404Layton HelpBox 3.7.1 generates different responses depending…
• CVE-2007-5405Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.…
• CVE-2007-5406kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents read…