CVE-2007-4599: Realnetworks Realone Player

High severity, CVSS 9.3. EPSS: 8.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist (PLS) file.

Affected products

• Realnetworks Realone Player: version 1.0 only; version 2.0 only
• Realnetworks Realplayer: version 10.0 only; version 10.5 only

Published 2007-10-31. Last modified 2026-06-16.