vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2006-0323

N/A
Published: March 23, 2006 at 11:00 PM UTC
Updated: June 16, 2026 at 10:20 PM UTC
4 products affected across 1 vendorRealplayerRealone PlayerHelix Player

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 17%

Description

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (15)

Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/19358
Third Party Advisoryx_refsource_SECUNIAPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/19362
Third Party Advisoryx_refsource_SECUNIAPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/19365
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/19390
Third Party Advisoryx_refsource_SREASON
Source: [email protected]
http://securityreason.com/securityalert/690
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://securitytracker.com/id?1015806
Vendor Advisoryx_refsource_GENTOOPatch
Source: [email protected]
http://www.gentoo.org/security/en/glsa/glsa-200603-24.xml
Third Party Advisoryx_refsource_CERT-VNPatchUS Government Resource
Source: [email protected]
http://www.kb.cert.org/vuls/id/231028

CVSS

9.3HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card