Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
BID:44444
Info
Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 44444 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-2578 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2010 12:00AM |
| Updated: | Oct 15 2010 12:00AM |
| Credit: | Carsten H. Eiram |
| Vulnerable: |
RealNetworks RealPlayer SP 1.1.4 RealNetworks RealPlayer SP 1.0.5 RealNetworks RealPlayer SP 1.0.2 RealNetworks RealPlayer SP 1.0.1 RealNetworks RealPlayer SP 1.0 RealNetworks RealPlayer SP 1.1.3 RealNetworks RealPlayer SP 1.1.2 RealNetworks RealPlayer SP 1.1.1 RealNetworks RealPlayer SP 1.1 RealNetworks RealPlayer Enterprise 2.1.2 RealNetworks RealPlayer Enterprise 1.7 RealNetworks RealPlayer Enterprise 1.6 RealNetworks RealPlayer Enterprise 1.5 RealNetworks RealPlayer Enterprise 1.2 RealNetworks RealPlayer Enterprise 1.1 |
| Not Vulnerable: |
RealNetworks RealPlayer SP 1.1.5 RealNetworks RealPlayer Enterprise 2.1.3 |
Discussion
Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
Real Networks RealPlayer SP and RealPlayer Enterprise are prone to a remote heap-based buffer-overflow vulnerability.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to RealPlayer SP 1.1.5 and RealPlayer Enterprise 2.1.3 are vulnerable.
NOTE: This issue was previously discussed in BID 44144 (Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities) but has been given its own records to better document it.
Real Networks RealPlayer SP and RealPlayer Enterprise are prone to a remote heap-based buffer-overflow vulnerability.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to RealPlayer SP 1.1.5 and RealPlayer Enterprise 2.1.3 are vulnerable.
NOTE: This issue was previously discussed in BID 44144 (Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities) but has been given its own records to better document it.
Exploit / POC
Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Real Networks RealPlayer SP and RealPlayer Enterprise Remote Heap Buffer Overflow Vulnerability
References:
References:
- RealPlayer Homepage (Real Networks )
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)