CVE-2006-6847

Published: Dec 31, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument.

Affected (8)

Products: Realnetworks: Realplayer

Realnetworks

1 product

Realplayer

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Realnetworks Realplayer	Version 10.5
Realnetworks Realplayer	Version 10.5_6.0.12.1016_beta
Realnetworks Realplayer	Version 10.5_6.0.12.1040
Realnetworks Realplayer	Version 10.5_6.0.12.1053
Realnetworks Realplayer	Version 10.5_6.0.12.1056
Realnetworks Realplayer	Version 10.5_6.0.12.1059
Realnetworks Realplayer	Version 10.5_6.0.12.1069
Realnetworks Realplayer	Version 10.5_6.0.12.1235