Multiple RealNetworks Products Multiple Remote Vulnerabilities
BID:37880
Info
Multiple RealNetworks Products Multiple Remote Vulnerabilities
| Bugtraq ID: | 37880 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-4241 CVE-2009-4242 CVE-2009-4243 CVE-2009-4244 CVE-2009-4245 CVE-2009-4257 CVE-2009-4248 CVE-2009-4247 CVE-2009-4246 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2010 12:00AM |
| Updated: | Jul 13 2010 08:27PM |
| Credit: | Evgeny Legerov, anonymous researchers working with iDEFENSE Labs, John Rambo, Peter Vreugdenhil working with TippingPoint's Zero Day Initiative, and anonymous researchers working with TippingPoint's Zero Day Initiative |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10_sparc Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 RealNetworks RealPlayer SP 1.0.1 RealNetworks RealPlayer SP 1.0 RealNetworks RealPlayer Enterprise 1.7 RealNetworks RealPlayer Enterprise 1.6 RealNetworks RealPlayer Enterprise 1.5 RealNetworks RealPlayer Enterprise 1.2 RealNetworks RealPlayer Enterprise 1.1 RealNetworks RealPlayer Enterprise RealNetworks RealPlayer 10 for Mac OS 10.0 .0.331 RealNetworks RealPlayer 10 for Mac OS 10.0.0.503 RealNetworks RealPlayer 10 for Mac OS 10.0.0.481 RealNetworks RealPlayer 10 for Mac OS 10.0.0.412 RealNetworks RealPlayer 10 for Mac OS 10.0.0.396 RealNetworks RealPlayer 10 for Mac OS 10.0.0.352 RealNetworks RealPlayer 10 for Mac OS 10.0.0.325 RealNetworks RealPlayer 10 for Mac OS 10.0.0.305 RealNetworks RealPlayer 10 for Mac OS RealNetworks RealPlayer 10 for Linux 10.1 .3114 RealNetworks RealPlayer 10 for Linux 10.0.9 RealNetworks RealPlayer 10 for Linux 10.0.8 RealNetworks RealPlayer 10 for Linux 10.0.7 RealNetworks RealPlayer 10 for Linux 10.0.6 RealNetworks RealPlayer 10 for Linux 10.0.5 RealNetworks RealPlayer 10 for Linux 10.0.4 RealNetworks RealPlayer 10 for Linux 10.0.3 RealNetworks RealPlayer 10 for Linux 10.0.2 RealNetworks RealPlayer 10 for Linux 10.0.1 RealNetworks RealPlayer 10 for Linux RealNetworks RealPlayer 11.0.5 RealNetworks RealPlayer 11.0.4 RealNetworks RealPlayer 11.0.3 RealNetworks RealPlayer 11.0.2 RealNetworks RealPlayer 11.0.1 RealNetworks RealPlayer 10.5 v6.0.12.1741 RealNetworks RealPlayer 10.5 v6.0.12.1698 RealNetworks RealPlayer 10.5 v6.0.12.1675 RealNetworks RealPlayer 10.5 v6.0.12.1663 RealNetworks RealPlayer 10.5 v6.0.12.1483 RealNetworks RealPlayer 10.5 v6.0.12.1348 RealNetworks RealPlayer 10.5 v6.0.12.1235 RealNetworks RealPlayer 10.5 v6.0.12.1069 RealNetworks RealPlayer 10.5 v6.0.12.1059 RealNetworks RealPlayer 10.5 v6.0.12.1056 RealNetworks RealPlayer 10.5 v6.0.12.1053 RealNetworks RealPlayer 10.5 v6.0.12.1040 RealNetworks RealPlayer 10.5 RealNetworks RealPlayer 11 |
| Not Vulnerable: | |
Exploit / POC
Multiple RealNetworks Products Multiple Remote Vulnerabilities
Currently we are not aware of any working exploits for some of these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Working commercial exploits are available through VUPEN Security - Exploit and PoCs Service for CVE-2009-4248 and CVE-2009-4244. These exploits are not otherwise publicly available or known to be circulating in the wild.
A commercial exploit is available through the VulnDisco pack for CVE-2009-4247. This exploit is not otherwise publicly available or known to be circulating in the wild.
Currently we are not aware of any working exploits for some of these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Working commercial exploits are available through VUPEN Security - Exploit and PoCs Service for CVE-2009-4248 and CVE-2009-4244. These exploits are not otherwise publicly available or known to be circulating in the wild.
A commercial exploit is available through the VulnDisco pack for CVE-2009-4247. This exploit is not otherwise publicly available or known to be circulating in the wild.
References
Multiple RealNetworks Products Multiple Remote Vulnerabilities
References:
References:
- CVE-2009-4247 Buffer Overflow Vulnerability in RealPlayer (Sun)
- Real Networks RealPlayer Compressed GIF Handling Integer Overflow (iDefense Labs)
- RealNetworks RealPlayer 11 HTTP Chunked Encoding Integer Overflow Vulnerability (iDefense Labs)
- RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability (iDefense Labs)
- RealPlayer Homepage (Real Networks )
- ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerabil (Zero Day Initiative)
- ZDI-10-006: RealNetworks RealPlayer GIF Handling Remote Code Execution Vulnerabi (Zero Day Initiative)
- ZDI-10-007: RealNetworks RealPlayer SMIL getAtom Remote Code Execution Vulnerabi (Zero Day Initiative)
- ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerabili (Zero Day Initiative)
- ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerabi (Zero Day Initiative)
- iDefense Security Advisory 02.01.10: Real Networks RealPlayer Compressed GIF Han (iDefense Labs
- iDefense Security Advisory 02.01.10: RealNetworks RealPlayer 11 HTTP Chunked Enc (iDefense Labs
- iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocat (iDefense Labs
- ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerabil (ZDI Disclosures
- ZDI-10-006: RealNetworks RealPlayer GIF Handling Remote Code Execution Vulnerabi (ZDI Disclosures
- ZDI-10-007: RealNetworks RealPlayer SMIL getAtom Remote Code Execution Vulnerabi (ZDI Disclosures
- ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerabili (ZDI Disclosures
- ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerabi (ZDI Disclosures
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (RealNetworks)