Real Networks RealPlayer 'OpenURLinPlayerBrowser' Method Remote Code Execution Vulnerability
BID:46285
Info
Real Networks RealPlayer 'OpenURLinPlayerBrowser' Method Remote Code Execution Vulnerability
| Bugtraq ID: | 46285 |
| Class: | Unknown |
| CVE: |
CVE-2011-0694 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 08 2011 12:00AM |
| Updated: | Feb 11 2011 04:09PM |
| Credit: | Eduardo working with TippingPoint's Zero Day Initiative |
| Vulnerable: |
Real Networks RealPlayer SP 1.1.5 Real Networks RealPlayer SP 1.1.4 Real Networks RealPlayer SP 1.0.5 Real Networks RealPlayer SP 1.0.2 Real Networks RealPlayer SP 1.0.1 Real Networks RealPlayer SP 1.0 Real Networks RealPlayer SP 1.1.3 Real Networks RealPlayer SP 1.1.2 Real Networks RealPlayer SP 1.1.1 Real Networks RealPlayer SP 1.1 Real Networks RealPlayer Enterprise 2.1.3 Real Networks RealPlayer Enterprise 2.1.2 Real Networks RealPlayer Enterprise 2.1.4 Real Networks RealPlayer Enterprise 2.0 Real Networks RealPlayer 14.0.2 Real Networks RealPlayer 14.0.1 Real Networks RealPlayer 14.0.0 Real Networks RealPlayer 11.1 Real Networks RealPlayer 11 |
| Not Vulnerable: |
RealNetworks RealPlayer for Mac 12.0 RealNetworks RealPlayer Enterprise 2.1.5 RealNetworks RealPlayer 14.0.2 RealNetworks Linux RealPlayer 11.0 |
Discussion
Real Networks RealPlayer 'OpenURLinPlayerBrowser' Method Remote Code Execution Vulnerability
Real Networks RealPlayer is prone to a remote code-execution vulnerability.
Successful exploits will allow an attacker to execute arbitrary code in the context of the browser.
Real Networks RealPlayer is prone to a remote code-execution vulnerability.
Successful exploits will allow an attacker to execute arbitrary code in the context of the browser.
Exploit / POC
Real Networks RealPlayer 'OpenURLinPlayerBrowser' Method Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Real Networks RealPlayer 'OpenURLinPlayerBrowser' Method Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Real Networks RealPlayer 'OpenURLinPlayerBrowser' Method Remote Code Execution Vulnerability
References:
References:
- RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulner (Zero Day Initiative)
- RealPlayer Homepage (Real Networks )
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities Feb 8th (RealPlayer)