RealNetworks RealPlayer MP3 File Handling Remote Denial of Service Vulnerability

Bugtraq ID:	34719
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2009 12:00AM
Updated:	Apr 27 2009 03:36PM
Credit:	Abdul-Aziz Hariri
Vulnerable:	RealNetworks RealPlayer Gold 10.0
Not Vulnerable:

RealNetworks RealPlayer MP3 File Handling Remote Denial of Service Vulnerability

RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files.

Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users.

RealPlayer 10 Gold is vulnerable; other versions may also be affected.

RealNetworks RealPlayer MP3 File Handling Remote Denial of Service Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.mp3' file using the affected application.

The following exploit is available:

• /data/vulnerabilities/exploits/34719.py

RealNetworks RealPlayer MP3 File Handling Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any solutions for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RealNetworks RealPlayer MP3 File Handling Remote Denial of Service Vulnerability

References:

• RealPlayer Homepage (Real Networks)
  
• RealPlayer 11 GOLD 'MP3' remote DoS (Insight Technologies)