CVE-2007-2264: Realnetworks Realone Player

High severity, CVSS 9.3. EPSS: 7.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.

Affected products

• Realnetworks Realone Player: any version; version 1.0 only; version 2.0 only
• Realnetworks Realplayer: version 8.0 only; version 10.0 only; version 10.1 only; version 10.5 only
• Realnetworks Realplayer Enterprise: any version

Published 2007-10-31. Last modified 2026-06-16.