CVE-2008-3066: Realnetworks Realplayer

High severity, CVSS 9.3. EPSS: 9.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file.

Affected products

• Realnetworks Realplayer: version 10.0 only; version 10.5 only

Published 2008-07-28. Last modified 2026-06-16.