CVE-2007-5400

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer...

9.3 HighFix available

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

Exploit likelihood

6.77%Down 3.1 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

Record: CVE-2007-5400
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

Record: CVE-2007-5400
Updated: 2026-11-02

EUVDEUVD-2007-5376 No score

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

Record: EUVD-2007-5376
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qw24-6ccm-w25c No score

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer...

Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.

Record: GHSA-qw24-6ccm-w25c
Weakness: CWE-119
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`realplayer-uninstall` Red Hat:rhel_extras:3	before 0:10.0.9-0.rhel3.7	0:10.0.9-0.rhel3.7
`RealPlayer-uninstall` Red Hat:rhel_extras:4	before 0:10.0.9-3	0:10.0.9-3
`RealPlayer-uninstall` Red Hat:rhel_extras:5::client	before 0:10.0.9-4.el5	0:10.0.9-4.el5
`RealPlayer-uninstall` Red Hat:rhel_extras:5::server	before 0:10.0.9-4.el5	0:10.0.9-4.el5

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, facts, references, title	GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5400 is a high vulnerability (CVSS 9.3) in Real Realplayer, published July 28, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.77%, the 94th percentile. Fixed in realplayer-uninstall 0:10.0.9-0.rhel3.7.

References

Show 16 moreShow less