RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability

Bugtraq ID:	15382
Class:	Boundary Condition Error
CVE:	CVE-2005-2630
Remote:	Yes
Local:	No
Published:	Nov 10 2005 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Discovery is credited to Fang Xing of eEye Digital Security.
Vulnerable:	RealNetworks RealPlayer 10.5 v6.0.12.1235 RealNetworks RealPlayer 10.5 v6.0.12.1069 RealNetworks RealPlayer 10.5 v6.0.12.1059 RealNetworks RealPlayer 10.5 v6.0.12.1056 RealNetworks RealPlayer 10.5 v6.0.12.1053 RealNetworks RealPlayer 10.5 v6.0.12.1040 RealNetworks RealPlayer 10.0 + S.u.S.E. cvsup-16.1h-43.i586.rpm + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 RealNetworks RealPlayer 8.0 Win32 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 SP1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows XP Home - Microsoft Windows XP Professional RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0
Not Vulnerable:

RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability

A heap overflow vulnerability exists in RealPlayer on Windows platforms.

The issue arises when 'DUNZIP32.DLL' is called to handle a malformed file.

A successful attack can allow the attacker to gain unauthorized access to a vulnerable computer.

RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability

Solution:
The vendor has released fixes to address this issue. The patches are available through the 'Check for Update' functionality of the software under the 'Tools' menu. Fixes are available from the following location as well:

http://service.real.com/realplayer/security/

RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability

References:

• Home Page (Real Networks)
  
• [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II ()