RealPlayer Unspecified Local Resource Reference Vulnerability

Bugtraq ID:	30378
Class:	Unknown
CVE:	CVE-2008-3064
Remote:	Yes
Local:	No
Published:	Jul 25 2008 12:00AM
Updated:	Jul 30 2008 03:47PM
Credit:	cocoruder
Vulnerable:	RealNetworks RealPlayer Enterprise 1.7 RealNetworks RealPlayer Enterprise 1.6 RealNetworks RealPlayer Enterprise 1.5 RealNetworks RealPlayer Enterprise 1.2 RealNetworks RealPlayer Enterprise 1.1 RealNetworks RealPlayer Enterprise RealNetworks RealPlayer 10 6.0.12 .1662 RealNetworks RealPlayer 10 English RealNetworks RealPlayer 10.5 v6.0.12.1483 RealNetworks RealPlayer 10.5 v6.0.12.1483 RealNetworks RealPlayer 10.5 v6.0.12.1348 RealNetworks RealPlayer 10.5 v6.0.12.1235 RealNetworks RealPlayer 10.5 v6.0.12.1069 RealNetworks RealPlayer 10.5 v6.0.12.1059 RealNetworks RealPlayer 10.5 v6.0.12.1056 RealNetworks RealPlayer 10.5 v6.0.12.1053 RealNetworks RealPlayer 10.5 v6.0.12.1040 RealNetworks RealPlayer 10.5 Beta v6.0.12.1016 RealNetworks RealPlayer 10.5 RealNetworks RealPlayer 10.0 BETA RealNetworks RealPlayer 10.0 v6.0.12.690 RealNetworks RealPlayer 10.0 + S.u.S.E. cvsup-16.1h-43.i586.rpm + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 RealNetworks RealPlayer 10.5-GOLD
Not Vulnerable:	RealNetworks RealPlayer 10.5 v6.0.12.1675

RealPlayer Unspecified Local Resource Reference Vulnerability

RealPlayer is prone to an unspecified vulnerability.

Very little information is available for this vulnerability. The vendor is classifying the issue as a 'local resource reference vulnerability'.

We will update this BID as more information arises.

RealPlayer Unspecified Local Resource Reference Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RealPlayer Unspecified Local Resource Reference Vulnerability

Solution:
The vendor has released updates. Contact the vendor for details.

RealPlayer Unspecified Local Resource Reference Vulnerability

References:

• July 25, 2008 - RealNetworks, Inc. Releases Update to Address Security Vulnerabi (Real Networks)
  
• RealPlayer Homepage (Real Networks )
  
• RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability (cocoruder(frankruder_at_hotmail.com))