CVE-2008-5664: realtek realtek_media_player

CVSS: 9.3v2.0HighModified

Published 18-12-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-5664 is a high (CVSS 9.3) vulnerability in realtek realtek_media_player. EPSS estimates a 36.23% chance of exploitation in the next 30 days, higher than 98.4% of scored vulnerabilities. 5 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

36.23%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits5reference, exploit-database, metasploit

Timeline

18-12-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

36.23%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 36.23% on 20-09-2026

20-09-202620-10-2026

EPSS score

36.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

5 found

referenceUnverified
Exploit Reference (shinnai.net)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalwindowsVerified
Realtek Sound Manager (rtlrack.exe 1.15.0.0) - Playlist Buffer Overflow
Maturity: weaponized

Show all 5 exploits

exploit-databaseremotewindowsVerified
Realtek Media Player Playlist - Remote Buffer Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Realtek Media Player Playlist Buffer Overflow
exploit/windows/misc/realtek_playlist
Maturity: weaponized