RETIRED: Real Networks RealPlayer Multiple Remote Vulnerabilities

Bugtraq ID:	45327
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 10 2010 12:00AM
Updated:	Dec 16 2010 10:14PM
Credit:	Alin Rad Pop and Carsten Eiram of Secunia Research, Nicolas Joly and Chaouki Bekrar of VUPEN Vulnerability Research Team, <br>Aaron Portnoy, Zef Cekaj and Logan Brown of TippingPoint DVLabs, anonymous, Omair of iDefense Labs, Damian Put, Team lollersk8erz
Vulnerable:	Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 RealNetworks RealPlayer SP 1.1.5 RealNetworks RealPlayer SP 1.1.4 RealNetworks RealPlayer SP 1.0.5 RealNetworks RealPlayer SP 1.0.2 RealNetworks RealPlayer SP 1.0.1 RealNetworks RealPlayer SP 1.0 RealNetworks RealPlayer SP 1.1.3 RealNetworks RealPlayer SP 1.1.2 RealNetworks RealPlayer SP 1.1.1 RealNetworks RealPlayer SP 1.1 RealNetworks RealPlayer for Mac 12.0.0.1444 RealNetworks RealPlayer for Mac 11.1 RealNetworks RealPlayer for Mac 11.0 RealNetworks RealPlayer for Linux 11.0.2.1744 RealNetworks RealPlayer Enterprise 2.1.3 RealNetworks RealPlayer Enterprise 2.1.2 RealNetworks RealPlayer Enterprise 1.7 RealNetworks RealPlayer Enterprise 1.6 RealNetworks RealPlayer Enterprise 1.5 RealNetworks RealPlayer Enterprise 1.2 RealNetworks RealPlayer Enterprise 1.1 RealNetworks RealPlayer Enterprise RealNetworks RealPlayer 11 Beta 6.0.14 .550 RealNetworks RealPlayer 10 for Mac OS 10.0 .0.331 RealNetworks RealPlayer 10 for Mac OS 10.0.0.503 RealNetworks RealPlayer 10 for Mac OS 10.0.0.481 RealNetworks RealPlayer 10 for Mac OS 10.0.0.412 RealNetworks RealPlayer 10 for Mac OS 10.0.0.396 RealNetworks RealPlayer 10 for Mac OS 10.0.0.352 RealNetworks RealPlayer 10 for Mac OS 10.0.0.325 RealNetworks RealPlayer 10 for Mac OS 10.0.0.305 RealNetworks RealPlayer 10 for Mac OS RealNetworks RealPlayer 10 for Linux 10.1 .3114 RealNetworks RealPlayer 10 for Linux 10.0.9 RealNetworks RealPlayer 10 for Linux 10.0.8 RealNetworks RealPlayer 10 for Linux 10.0.7 RealNetworks RealPlayer 10 for Linux 10.0.6 RealNetworks RealPlayer 10 for Linux 10.0.5 RealNetworks RealPlayer 10 for Linux 10.0.4 RealNetworks RealPlayer 10 for Linux 10.0.3 RealNetworks RealPlayer 10 for Linux 10.0.2 RealNetworks RealPlayer 10 for Linux 10.0.1 RealNetworks RealPlayer 10 for Linux RealNetworks RealPlayer 11.0.5 RealNetworks RealPlayer 11.0.4 RealNetworks RealPlayer 11.0.3 RealNetworks RealPlayer 11.0.2 RealNetworks RealPlayer 11.0.1 RealNetworks RealPlayer 11.1 RealNetworks RealPlayer 11 Beta RealNetworks RealPlayer 11
Not Vulnerable:	RealNetworks RealPlayer for Mac 12.0.0.1548 RealNetworks RealPlayer for Linux 11.0.2.2315 RealNetworks RealPlayer Enterprise 2.1.4 RealNetworks RealPlayer 14.0.1

RETIRED: Real Networks RealPlayer Multiple Remote Vulnerabilities

Real Networks RealPlayer is prone to multiple security vulnerabilities.

Real Networks released an advisory regarding 27 security vulnerabilities in RealPlayer.

The following versions are affected:

RealPlayer for Windows SP 1.1.5 and previous (RealPlayer 14.0 is not affected)
RealPlayer Enterprise 2.1.3 and previous
RealPlayer for Mac 12.0.0.1444 and previous
RealPlayer for Linux 11.0.2.1744 and previous

This BID is being retired. The following individual records exist to better document the issues:

45406 Real Networks RealPlayer Multi-Rate Audio Stream Heap Overflow Vulnerability
45407 Real Networks RealPlayer 'StreamTitle' Heap Corruption Vulnerability
45409 Real Networks RealPlayer '.AAC' File Handling Integer Overflow Vulnerability
45410 Real Networks RealPlayer 'pnen3260.dll' Module Parsing Integer Overflow Vulnerability
45411 Real Networks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability
45412 Real Networks RealPlayer Real Audio Audio Codec Heap Overflow Vulnerability
45414 Real Networks RealPlayer RV20 Video Streams Heap Overflow Vulnerability
45421 Real Networks RealPlayer SIPR (CVE-2010-4379) Heap Overflow Vulnerability
45422 Real Networks RealPlayer Cook Codec Initialization Function Unspecifeid Vulnrability
45424 Real Networks RealPlayer SOUND (CVE-2010-4380) Heap Overflow Vulnerability
45425 Real Networks RealPlayer 'AAC' File handling (CVE-2010-4381) Heap Overflow Vulnerability
45426 Real Networks RealPlayer SIPR Stream Frame Handling Integer Overflow Vulnerability
45428 Real Networks RealPlayer RealMedia (CVE-2010-4382) Multiple Heap Overflow Vulnerabilities
45429 Real Networks RealPlayer 'RA5' Files (CVE-2010-4383) Heap Overflow Vulnerability
45444 Real Networks RealPlayer Cook Codec (CVE-2010-4389) Heap Overflow Vulnerability
45445 Real Networks RealPlayer RealMedia Memory (CVE-2010-4386) Heap Corruption Vulnerability
45448 Real Networks RealPlayer 'IVR' File Handling Multiple Heap Overflow Vulnerabilities
45449 Real Networks RealPlayer Media Properties Header (CVE-2010-4384 ) Memory Corruption Vulnerability
45451 Real Networks RealPlayer RMX File (CVE-2010-4391) Heap Overflow Vulnerability
45452 Real Networks RealPlayer RealMedia File (CVE-2010-4392) Heap Overflow Vulnerability
45453 Real Networks RealPlayer RealAudio Codec (CVE-2010-4387) Memory Corruption Vulnerability
45455 Real Networks RealPlayer AAC Spectral Data Parsing Unspecified Vulnerability
45458 Real Networks RealPlayer RealPix File Handling Heap Overflow Vulnerability
45459 Real Networks RealPlayer Advanced Audio Coding Heap Overflow Vulnerability
45463 Real Networks Cook Codec Memory Access Vulnerability
45464 Real Networks RealPlayer ActiveX control (CVE-2010-4396) Cross-Zone Scripting Vulnerability
45465 Real Networks RealPlayer 'HTML' Files Remote Code Execution Cross Domain Scripting Vulnerability

RETIRED: Real Networks RealPlayer Multiple Remote Vulnerabilities

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service for some of these issues. These exploits are not otherwise publicly available or known to be circulating in the wild.

RETIRED: Real Networks RealPlayer Multiple Remote Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.