RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities
BID:10520
Info
RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities
| Bugtraq ID: | 10520 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2004 12:00AM |
| Updated: | Jun 11 2004 12:00AM |
| Credit: | Discovery is credited to John Heasman of NGSSoftware. |
| Vulnerable: |
RealNetworks RealPlayer Enterprise RealNetworks RealPlayer 8 RealNetworks RealPlayer 10 Japanese RealNetworks RealPlayer 10 German RealNetworks RealPlayer 10 English RealNetworks RealOne Player version 2.0 for Windows RealNetworks RealOne Player 6.0.11 .872 RealNetworks RealOne Player 6.0.11 .868 RealNetworks RealOne Player 6.0.11 .853 RealNetworks RealOne Player 6.0.11 .841 RealNetworks RealOne Player 6.0.11 .830 RealNetworks RealOne Player 6.0.11 .818 RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0 RealNetworks RealOne Player RealNetworks RealOne Enterprise Desktop 6.0.11 .774 |
| Not Vulnerable: | |
Discussion
RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities
NGSSoftware has reported that heap overflow vulnerabilities exist in RealNetworks RealPlayer releases. These issues may be triggered by a malformed .RA, .RM, .RV, or .RMJ file. If successfully exploited, it is possible to execute arbitrary code in the context of the user running the player.
NGSSoftware has reported that heap overflow vulnerabilities exist in RealNetworks RealPlayer releases. These issues may be triggered by a malformed .RA, .RM, .RV, or .RMJ file. If successfully exploited, it is possible to execute arbitrary code in the context of the user running the player.
Exploit / POC
RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities
The researchers who discovered this issue have developed working exploit code that is not publicly available or known to be circulating in the wild.
The researchers who discovered this issue have developed working exploit code that is not publicly available or known to be circulating in the wild.
Solution / Fix
RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities
Solution:
RealNetworks has released updates to the affected software. Please see the referenced web page from RealNetworks for further information on obtaining the fixes.
It is suggested that users use the "Check for Updates" options in the software to automatically upgrade the software.
Solution:
RealNetworks has released updates to the affected software. Please see the referenced web page from RealNetworks for further information on obtaining the fixes.
It is suggested that users use the "Check for Updates" options in the software to automatically upgrade the software.
References
RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities
References:
References:
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (RealNetworks)
- Multiple vulnerabilities in RealPlayer (#NISR11062004) ("NGSSoftware Insight Security Research"