Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution Vulnerability

Bugtraq ID:	44443
Class:	Unknown
CVE:	CVE-2010-3749
Remote:	Yes
Local:	No
Published:	Oct 15 2010 12:00AM
Updated:	Jan 14 2011 05:52AM
Credit:	Sean de Regge working with TippingPoint's Zero Day Initiative
Vulnerable:	Real Networks RealPlayer SP 1.0.5 Real Networks RealPlayer SP 1.0.2 Real Networks RealPlayer SP 1.0.1 Real Networks RealPlayer SP 1.0 Real Networks RealPlayer SP 1.1
Not Vulnerable:	Real Networks RealPlayer SP 1.1.1

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution Vulnerability

Real Networks RealPlayer SP is prone to a remote code-execution vulnerability because it fails to sufficiently validate user-supplied data.

Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control.

Versions prior to and including RealPlayer SP 1.1 for Windows are vulnerable.

NOTE: This issue was previously discussed in BID 44144 (Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities) but has been given its own record to better document it.

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/44443.html

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for details.

Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution Vulnerability

References:

• RealPlayer Homepage (Real Networks )
  
• RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)
  
• ZDI-10-211 RealNetworks Realplayer RecordClip Parameter Injection Remote Code Ex (ZDI)