CVE-2006-6847

RealPlayer 10.5 'ierpplug.dll' Internet Explorer 7 - Denial of Service

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument.

Un control ActiveX en ierpplug.dll para RealNetworks RealPlayer 10.5 permite a un atacante remoto provocar denegación de servicio (caida de Internet Explorer 7) invocnado al método RealPlayer.OpenURLInPlayerBrowser con un segundo argumento.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-12-31 CVE Published
2007-01-02 CVE Reserved
2024-05-28 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (4)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/31141	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/3030	2024-08-07
http://downloads.securityfocus.com/vulnerabilities/exploits/21802.html	2024-08-07
http://www.securityfocus.com/bid/21802	2024-08-07

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5 Search vendor "Realnetworks" for product "Realplayer" and version "10.5"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1016_beta Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1016_beta"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1040 Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1040"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1053 Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1053"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1056 Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1056"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1059 Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1059"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1069 Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1069"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				10.5_6.0.12.1235 Search vendor "Realnetworks" for product "Realplayer" and version "10.5_6.0.12.1235"		-		Affected