CVE:CVE-2007-2264
CNNVD:CNNVD-200710-543
RealPlayer是一款流行的媒体播放器，支持多种文件格式。
RealNetworks RealPlayer 8、10、10.5和RealOne Player 1、2以及RealPlayer企业版中的RAM格式文件存在堆缓冲区溢出漏洞，远程攻击者可以一个大类型值RA文件头的RAM格式文件使得系统内存出现堆缓冲溢出，从而执行任意代码。
solution:Upgrade realnetworks realone_player to a higher version than *,1.0,2.0,and avoid the version 1.0,2.0; Upgrade realnetworks realplayer to a higher version than 8.0,10.0,10.0:10.0.0.305,10.0:10.0.0.331,10.0:10.0.0.352,10.0:10.0.5,10.0:10.0.6,10.0:10.0.7,10.0:10.0.8,10.0:10.0.9,10.1:10.0.0._481,10.1:10.0.0.396,10.1:10.0.0.412,10.5:6.0.12.1040,10.5:6.0.12.1578,10.5:6.0.12.1698,10.5:6.0.12.1741,and avoid the version 8.0,10.0,10.0:10.0.0.305,10.0:10.0.0.331,10.0:10.0.0.352,10.0:10.0.5,10.0:10.0.6,10.0:10.0.7,10.0:10.0.8,10.0:10.0.9,10.1:10.0.0._481,10.1:10.0.0.396,10.1:10.0.0.412,10.5:6.0.12.1040,10.5:6.0.12.1578,10.5:6.0.12.1698,10.5:6.0.12.1741; Upgrade realnetworks realplayer_enterprise to a higher version than *