CVE-2008-5664 - Vulnerability Details - OpenCVE

Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Realtek	Realtek Media Player

Configuration 1 [-]

cpe:2.3:a:realtek:realtek_media_player:1.15.0.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.spirityenterprise.com/pentest
http://osvdb.org/50715
http://secunia.com/advisories/33183
http://securityreason.com/securityalert/4783
http://www.securityfocus.com/bid/32860
http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html
http://www.vupen.com/english/advisories/2008/3446
https://exchange.xforce.ibmcloud.com/vulnerabilities/47380
https://www.exploit-db.com/exploits/7492

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-12-18T21:00:00.000Z

Updated: 2024-08-07T11:04:43.519Z

Reserved: 2008-12-18T00:00:00.000Z

Link: CVE-2008-5664

Vulnrichment

No data.

NVD

Status : Modified

Published: 2008-12-19T01:52:02.437

Modified: 2026-04-23T00:35:47.467

Link: CVE-2008-5664

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-12-16T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "rtlrack-playlist-bo(47380)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47380"}, {"name": "7492", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/7492"}, {"name": "4783", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/4783"}, {"name": "50715", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/50715"}, {"name": "33183", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/33183"}, {"tags": ["x_refsource_MISC"], "url": "http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html"}, {"name": "ADV-2008-3446", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/3446"}, {"name": "32860", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/32860"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-5664", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "rtlrack-playlist-bo(47380)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47380"}, {"name": "7492", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/7492"}, {"name": "4783", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/4783"}, {"name": "50715", "refsource": "OSVDB", "url": "http://osvdb.org/50715"}, {"name": "33183", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/33183"}, {"name": "http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html", "refsource": "MISC", "url": "http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html"}, {"name": "ADV-2008-3446", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/3446"}, {"name": "32860", "refsource": "BID", "url": "http://www.securityfocus.com/bid/32860"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T11:04:43.519Z"}, "title": "CVE Program Container", "references": [{"name": "rtlrack-playlist-bo(47380)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47380"}, {"name": "7492", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/7492"}, {"name": "4783", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/4783"}, {"name": "50715", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/50715"}, {"name": "33183", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/33183"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html"}, {"name": "ADV-2008-3446", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/3446"}, {"name": "32860", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/32860"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-5664", "datePublished": "2008-12-18T21:00:00.000Z", "dateReserved": "2008-12-18T00:00:00.000Z", "dateUpdated": "2024-08-07T11:04:43.519Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:realtek:realtek_media_player:1.15.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "E26D05C6-FF8F-49C7-B207-0A300105D775", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en Realtek Media Player (anteriormente conocido como Realtek Sound Manager, RtlRack, o rtlrack.exe) v1.15.0.0 permite a atacantes remotos ejecutar c\u00f3digo a su elecci\u00f3n a trav\u00e9s de un fichero de lista de reproducci\u00f3n manipulado."}], "id": "CVE-2008-5664", "lastModified": "2026-04-23T00:35:47.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2008-12-19T01:52:02.437", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/50715"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/33183"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/4783"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/32860"}, {"source": "cve@mitre.org", "tags": ["Exploit", "URL Repurposed"], "url": "http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/3446"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47380"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/7492"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/50715"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/33183"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/4783"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/32860"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "URL Repurposed"], "url": "http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/3446"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47380"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/7492"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}