Realnetworks Rhapsody vulnerabilities

2 CVEs affecting Realnetworks Rhapsody, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-0323, published 2006-03-23.

More from Realnetworks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-0323, published 2006-03-23. High severity, CVSS 9.3. EPSS: 16.7% chance of exploitation in the next 30 days. Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary…
• CVE-2005-2922, published 2005-12-31. High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a…