Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability
BID:4200
Info
Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability
| Bugtraq ID: | 4200 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2002-0337 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2002 12:00AM |
| Updated: | Jul 11 2009 10:56AM |
| Credit: | Reported by NtWaK0 @ www.SafeHack.com. |
| Vulnerable: |
RealNetworks RealPlayer 8.0 Win32 |
| Not Vulnerable: | |
Discussion
Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability
RealPlayer is a media player for Windows, Macintosh, Linux and Solaris. It has been reported that it is possible to cause RealPlayer 8 for Windows to consume 100% of available CPU resources, leading to a potential denial of service condition.
Allegedly this condition can be caused by placing maliciously constructed data into a file named with the .mp3 extension. This file must then be referenced in a web page viewed through Internet Explorer, and the link followed by the vulnerable user. When the file is automatically opened in RealPlayer, it has been reported that the process will hang, consuming 100% of the available CPU resources. The process will have to be manually killed.
There have been conflicting reports about this vulnerability.
RealPlayer is a media player for Windows, Macintosh, Linux and Solaris. It has been reported that it is possible to cause RealPlayer 8 for Windows to consume 100% of available CPU resources, leading to a potential denial of service condition.
Allegedly this condition can be caused by placing maliciously constructed data into a file named with the .mp3 extension. This file must then be referenced in a web page viewed through Internet Explorer, and the link followed by the vulnerable user. When the file is automatically opened in RealPlayer, it has been reported that the process will hang, consuming 100% of the available CPU resources. The process will have to be manually killed.
There have been conflicting reports about this vulnerability.
Exploit / POC
Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability
References:
References:
- RealPlayer Homepage (Real Networks)