RealNetworks RealPlayer '.rm' File Malformed URI Remote Denial of Service Vulnerability

Bugtraq ID:	37704
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 11 2010 12:00AM
Updated:	Jan 11 2010 12:00AM
Credit:	D3V!L FUCKER
Vulnerable:	RealNetworks RealPlayer 12.0.0.343
Not Vulnerable:

RealNetworks RealPlayer '.rm' File Malformed URI Remote Denial of Service Vulnerability

RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files.

Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users.

RealPlayer 12.0.0.343 is vulnerable; other versions may also be affected.

RealNetworks RealPlayer '.rm' File Malformed URI Remote Denial of Service Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.rm' file using the affected application.

The following exploit is available:

• /data/vulnerabilities/exploits/37704.pl

RealNetworks RealPlayer '.rm' File Malformed URI Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any solutions for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RealNetworks RealPlayer '.rm' File Malformed URI Remote Denial of Service Vulnerability

References:

• RealPlayer Homepage (Real Networks)