RealNetworks RealOne Player And RealPlayer ShowPreferences Action Buffer Overflow Vulnerability
BID:12311
Info
RealNetworks RealOne Player And RealPlayer ShowPreferences Action Buffer Overflow Vulnerability
| Bugtraq ID: | 12311 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 19 2005 12:00AM |
| Updated: | Jan 19 2005 12:00AM |
| Credit: | Discovery is credited to NGSSoftware Insight Security Research <[email protected]>. |
| Vulnerable: |
RealNetworks RealPlayer 10 Japanese RealNetworks RealPlayer 10 German RealNetworks RealPlayer 10 English RealNetworks RealPlayer 10.5 v6.0.12.1040 RealNetworks RealPlayer 10.5 Beta v6.0.12.1016 RealNetworks RealPlayer 10.5 RealNetworks RealPlayer 10.0 BETA RealNetworks RealPlayer 10.0 v6.0.12.690 RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0 |
| Not Vulnerable: |
RealNetworks RealPlayer for Palm OS RealNetworks RealPlayer 10 for Mac OS RealNetworks RealPlayer 10.5 v6.0.12.1053 RealNetworks RealOne Player for Palm OS RealNetworks Helix Player for Symbian |
Discussion
RealNetworks RealOne Player And RealPlayer ShowPreferences Action Buffer Overflow Vulnerability
RealOne Player and RealPlayer are affected by a buffer overflow vulnerability. This issue may be exploited by a remote attacker to execute arbitrary code in the context of the software.
The application fails to perfrom proper boundary checks before copying the arguments of the 'ShowPreferences' action to a static buffer through a 'sprintf()' function call.
An attacker can design a malicious Web site or skin file and trigger an overflow condition in the application. This issue may be leveraged to execute arbitrary code in the context of the user running the application.
It is likely that this issue is identical the vulnerability described in BID 11307 (RealNetworks RealOne Player And RealPlayer Unspecified Web Page Code Execution Vulnerability). This cannot be confirmed at the moment, however, one of the BIDs will be retired, if it turns out that the BIDs represent the same issue.
RealOne Player and RealPlayer are affected by a buffer overflow vulnerability. This issue may be exploited by a remote attacker to execute arbitrary code in the context of the software.
The application fails to perfrom proper boundary checks before copying the arguments of the 'ShowPreferences' action to a static buffer through a 'sprintf()' function call.
An attacker can design a malicious Web site or skin file and trigger an overflow condition in the application. This issue may be leveraged to execute arbitrary code in the context of the user running the application.
It is likely that this issue is identical the vulnerability described in BID 11307 (RealNetworks RealOne Player And RealPlayer Unspecified Web Page Code Execution Vulnerability). This cannot be confirmed at the moment, however, one of the BIDs will be retired, if it turns out that the BIDs represent the same issue.
Exploit / POC
RealNetworks RealOne Player And RealPlayer ShowPreferences Action Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
RealNetworks RealOne Player And RealPlayer ShowPreferences Action Buffer Overflow Vulnerability
Solution:
The vendor has released updates dealing with this issue. Please see the referenced advisory for more information on obtaining the updated packages.
Solution:
The vendor has released updates dealing with this issue. Please see the referenced advisory for more information on obtaining the updated packages.
References
RealNetworks RealOne Player And RealPlayer ShowPreferences Action Buffer Overflow Vulnerability
References:
References:
- Home Page (Real Networks)
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)
- RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e) ("NGSSoftware Insight Security Research"