RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Overflow Vulnerability

Bugtraq ID:	10528
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 10 2004 12:00AM
Updated:	Jun 10 2004 12:00AM
Credit:	This vulnerability was discovered by Karl Lynn, with additional research by Derek Soeder.
Vulnerable:	RealNetworks RealPlayer Enterprise RealNetworks RealPlayer 8 RealNetworks RealPlayer 10 Japanese RealNetworks RealPlayer 10 German RealNetworks RealPlayer 10 English RealNetworks RealPlayer 10.0 BETA RealNetworks RealPlayer 10.0 v6.0.12.690 RealNetworks RealPlayer 8.0 Win32 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 SP1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows XP Home - Microsoft Windows XP Professional RealNetworks RealPlayer 8.0 Unix - Caldera OpenLinux Workstation 3.1 - Debian Linux 2.2 IA-32 - Debian Linux 2.2 alpha - HP HP-UX 11.11 - HP HP-UX 11.0 - IBM AIX 4.3.3 - IBM AIX 4.3.2 - IBM AIX 4.3.1 - IBM AIX 4.3 - IBM AIX 4.2.1 - IBM AIX 4.2 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Redhat Linux 7.2 i386 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 i386 - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 8.2 - SCO eDesktop 2.4 - SGI IRIX 6.5.14 - SGI IRIX 6.5.13 m - SGI IRIX 6.5.13 f - SGI IRIX 6.5.13 - SGI IRIX 6.5.12 m - SGI IRIX 6.5.12 f - SGI IRIX 6.5.12 - SGI IRIX 6.5.11 m - SGI IRIX 6.5.11 f - SGI IRIX 6.5.11 - SGI IRIX 6.3 - Slackware Linux 8.0 - Slackware Linux 7.1 - Slackware Linux 7.0 - Sun Solaris 7.0 - Sun Solaris 2.6 + SuSE Linux 8.1 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 - SuSE Linux 7.0 i386 + SuSE Linux Desktop 1.0 RealNetworks RealPlayer 8.0 Mac RealNetworks RealOne Player 6.0.11 .872 RealNetworks RealOne Player 6.0.11 .868 RealNetworks RealOne Player 6.0.11 .853 RealNetworks RealOne Player 6.0.11 .841 RealNetworks RealOne Player 6.0.11 .830 RealNetworks RealOne Player 6.0.11 .818 RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0 RealNetworks RealOne Player RealNetworks RealOne Enterprise Desktop 6.0.11 .774
Not Vulnerable:

RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Overflow Vulnerability

eEye has reported that heap overflow vulnerabilities exist in RealNetworks RealPlayer releases. These issues may be triggered by a malformed movie file embedded in an HTML page. If successfully exploited, it is possible to execute arbitrary code in the context of the user running the player.

RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Overflow Vulnerability

Solution:
RealNetworks has released updates to the affected software. Please see the referenced web page from RealNetworks for further information on obtaining the fixes.

It is suggested that users use the "Check for Updates" options in the software to automatically upgrade the software.

RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Overflow Vulnerability

References:

• RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (RealNetworks)
  
• EEYE: RealPlayer embd3260.dll Error Response Heap Overflow ("Derek Soeder" )