CVE-2008-0098

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-08 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: As of 20080103, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Affected products

RealNetworks Realplayer: 11_build_6.0.14.748

References

http://gleg.net/realplayer11.html
http://lists.immunitysec.com/pipermail/dailydave/2008-January/004811.html
http://secunia.com/advisories/28276
http://www.securityfocus.com/bid/27091
http://www.securitytracker.com/id?1019153
http://www.us-cert.gov/current/index.html#public_exploit_code_for_realplayer
http://www.vupen.com/english/advisories/2008/0016
http://gleg.net/realplayer11.html
http://lists.immunitysec.com/pipermail/dailydave/2008-January/004811.html
http://secunia.com/advisories/28276
http://www.securityfocus.com/bid/27091
http://www.securitytracker.com/id?1019153

Get alerted when CVE-2008-0098 or the next vulnerability affects your stack