CVE-2008-5664

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 36%

from disclosure to weapon706 days

Published on NVDDec 18

1st PoC+706d

metasploitDec 16

exploitation probability

36%top 2% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/7492unverified exploitdbwww.exploit-db.com/exploits/16456unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/50715 http://secunia.com/advisories/33183 http://securityreason.com/securityalert/4783 https://exchange.xforce.ibmcloud.com/vulnerabilities/47380 https://www.exploit-db.com/exploits/7492 http://www.securityfocus.com/bid/32860 http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html http://www.vupen.com/english/advisories/2008/3446