RealOne Player and RealPlayer Multiple Unspecified Remote Vulnerabilities
BID:11335
Info
RealOne Player and RealPlayer Multiple Unspecified Remote Vulnerabilities
| Bugtraq ID: | 11335 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 06 2004 12:00AM |
| Updated: | Oct 06 2004 12:00AM |
| Credit: | Discovery is credited to John Heasman. |
| Vulnerable: |
RealNetworks RealPlayer Enterprise 1.6 RealNetworks RealPlayer Enterprise 1.5 RealNetworks RealPlayer Enterprise 1.2 RealNetworks RealPlayer Enterprise 1.1 RealNetworks RealPlayer Enterprise RealNetworks RealPlayer 8 RealNetworks RealPlayer 10 Japanese RealNetworks RealPlayer 10 German RealNetworks RealPlayer 10 English RealNetworks RealPlayer 10.5 v6.0.12.1040 RealNetworks RealPlayer 10.5 Beta v6.0.12.1016 RealNetworks RealPlayer 10.5 RealNetworks RealPlayer 10.0 RealNetworks RealPlayer 8.0 Win32 RealNetworks RealPlayer 8.0 Unix RealNetworks RealPlayer 8.0 Mac RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0 |
| Not Vulnerable: | |
Discussion
RealOne Player and RealPlayer Multiple Unspecified Remote Vulnerabilities
NGSSoftware have reported that multiple buffer overflow and unauthorized file access vulnerabilities exist in RealOne and RealPlayer. Details about these vulnerabilities have been withheld until a later date, but it appears that some of the issues may overlap with existing BIDs 11307 and 11308. There also appears to be other vulnerabilities that are not covered in these two BIDs.
Real Networks have reportedly released fixes for all of the issues.
NGSSoftware have reported that multiple buffer overflow and unauthorized file access vulnerabilities exist in RealOne and RealPlayer. Details about these vulnerabilities have been withheld until a later date, but it appears that some of the issues may overlap with existing BIDs 11307 and 11308. There also appears to be other vulnerabilities that are not covered in these two BIDs.
Real Networks have reportedly released fixes for all of the issues.
Exploit / POC
RealOne Player and RealPlayer Multiple Unspecified Remote Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
RealOne Player and RealPlayer Multiple Unspecified Remote Vulnerabilities
Solution:
The vendor has released updates dealing with this issue. Please see the referenced Real Networks advisory for more information on obtaining the updated packages.
Solution:
The vendor has released updates dealing with this issue. Please see the referenced Real Networks advisory for more information on obtaining the updated packages.
References
RealOne Player and RealPlayer Multiple Unspecified Remote Vulnerabilities
References:
References:
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)
- Vendor Notification Alerts (NGS Research)
- Patch available for multiple high risk vulnerabilities in RealPlayer ("NGSSoftware Insight Security Research"