RealPlayer RMOC3260.DLL ActiveX Control Import Denial Of Service Vulnerability
BID:26660
Info
RealPlayer RMOC3260.DLL ActiveX Control Import Denial Of Service Vulnerability
| Bugtraq ID: | 26660 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-6224 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 30 2007 12:00AM |
| Updated: | Dec 07 2007 05:02PM |
| Credit: | Adonis, Abed is credited with the discovery of this vulnerability. |
| Vulnerable: |
RealNetworks RealPlayer 11 |
| Not Vulnerable: | |
Discussion
RealPlayer RMOC3260.DLL ActiveX Control Import Denial Of Service Vulnerability
RealPlayer is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer.
An attacker can exploit this issue to cause the victim's browser (typically Internet Explorer) to crash. Given the nature of this issue, the attacker may also be able to execute code, but this has not been confirmed.
RealPlayer 11 is vulnerable; other versions may also be affected.
RealPlayer is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer.
An attacker can exploit this issue to cause the victim's browser (typically Internet Explorer) to crash. Given the nature of this issue, the attacker may also be able to execute code, but this has not been confirmed.
RealPlayer 11 is vulnerable; other versions may also be affected.
Exploit / POC
RealPlayer RMOC3260.DLL ActiveX Control Import Denial Of Service Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to open a maliciously crafted file.
The following exploit is available:
To exploit this issue, an attacker must entice an unsuspecting user to open a maliciously crafted file.
The following exploit is available:
Solution / Fix
RealPlayer RMOC3260.DLL ActiveX Control Import Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RealPlayer RMOC3260.DLL ActiveX Control Import Denial Of Service Vulnerability
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Vendor Homepage (Real Networks)
- DOS in Realplayer 11 ActiveX on Win Vista and Win XP SP2 ([email protected] )