RETIRED: Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities

Bugtraq ID:	44144
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 15 2010 12:00AM
Updated:	Oct 26 2010 08:58PM
Credit:	Anonymous researchers working with TippingPoint's Zero Day Initiative; Carsten Eiram of Secunia Research; Steve Manzuik of Microsoft Vulnerability Research (MSVR); Sebastian Apelt, CHkr_D591, Sean de Regge working with TippingPoint's Zero Day Initiative
Vulnerable:	Real Networks RealPlayer SP 1.1.4 Real Networks RealPlayer SP 1.0.5 Real Networks RealPlayer SP 1.0.2 Real Networks RealPlayer SP 1.0.1 Real Networks RealPlayer SP 1.0 Real Networks RealPlayer SP 1.1.3 Real Networks RealPlayer SP 1.1.2 Real Networks RealPlayer SP 1.1.1 Real Networks RealPlayer SP 1.1 Real Networks RealPlayer Enterprise 2.1.2 Real Networks RealPlayer Enterprise 1.7 Real Networks RealPlayer Enterprise 1.6 Real Networks RealPlayer Enterprise 1.5 Real Networks RealPlayer Enterprise 1.2 Real Networks RealPlayer Enterprise 1.1 Real Networks RealPlayer 11 Beta 6.0.14 .550 Real Networks RealPlayer 11.0.5 Real Networks RealPlayer 11.0.4 Real Networks RealPlayer 11.0.3 Real Networks RealPlayer 11.0.2 Real Networks RealPlayer 11.0.1 Real Networks RealPlayer 11.1 Real Networks RealPlayer 11 Beta Real Networks RealPlayer 11
Not Vulnerable:	Real Networks RealPlayer SP 1.1.5 Real Networks RealPlayer Enterprise 2.1.3

RETIRED: Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities

Real Networks RealPlayer SP and RealPlayer Enterprise are prone to multiple security vulnerabilities, including remote code-execution issues and buffer-overflow issues.

Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Other attacks may also be possible.

Versions prior to RealPlayer SP 1.1.5 and RealPlayer Enterprise 2.1.3 are vulnerable.

This BID is being retired. The following individual records exist to better document the issues:

44423 RealPlayer SP/Enterprise ActiveX Control Remote Heap Buffer Overflow Vulnerability
44440 Real Networks RealPlayer Malformed IVR Pointer Index Remote Code Execution Vulnerability
44441 Real Networks RealPlayer SP and RealPlayer Enterprise 'RichFX' Stack Buffer Overflow Vulnerability
44442 Real Networks RealPlayer SP and RealPlayer Enterprise Remote Code Execution Vulnerability
44443 Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution Vulnerability
44444 Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
44450 RealPlayer ActiveX Control CDDA URI Uninitialized Pointer Vulnerability

RETIRED: Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for details.

RETIRED: Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities

References:

• RealPlayer Homepage (Real Networks )
  
• RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)
  
• ZDI-10-209 RealNetworks RealPlayer Malformed IVR Pointer Index Remote Code Execu (ZDI)
  
• ZDI-10-210 RealNetworks RealPlayer ActiveX Control CDDA URI Uninitialized Pointe (ZDI)
  
• ZDI-10-211 RealNetworks Realplayer RecordClip Parameter Injection Remote Code Ex (ZDI)
  
• ZDI-10-212 RealNetworks RealPlayer RJMDSections Remote Code Execution Vulnerabil (ZDI)
  
• ZDI-10-213 RealNetworks RealPlayer Multiple Protocol Handlers Remote Code Execut (ZDI)