Real Networks RealPlayer Multiple Remote Vulnerabilities

Bugtraq ID:	49169
Class:	Unknown
CVE:	CVE-2011-2945 CVE-2011-2946 CVE-2011-2947 CVE-2011-2948 CVE-2011-2949 CVE-2011-2950 CVE-2011-2951 CVE-2011-2952 CVE-2011-2953 CVE-2011-2954 CVE-2011-2955
Remote:	Yes
Local:	No
Published:	Aug 16 2011 12:00AM
Updated:	Aug 16 2011 12:00AM
Credit:	Omair working with iDefense Labs, getB33r working with iDefense Labs, Martin Bartek working with TippingPoint's Zero Day Initiative, Luigi Auriemma working with TippingPoint's Zero Day Initiative, Sean de Regge working with TippingPoint's Zero Day Initiati
Vulnerable:	Real Networks RealPlayer SP 1.0.5 Real Networks RealPlayer SP 1.0.2 Real Networks RealPlayer SP 1.0.1 Real Networks RealPlayer SP 1.0 Real Networks RealPlayer Enterprise 2.1.3 Real Networks RealPlayer Enterprise 2.1.2 Real Networks RealPlayer Enterprise 2.1.5 Real Networks RealPlayer Enterprise 2.1.4 Real Networks RealPlayer Enterprise 2.0 Real Networks RealPlayer 12 for Mac OS 12.0.0.1569 Real Networks RealPlayer 14.0.2 633 Real Networks RealPlayer 11.0.5 Real Networks RealPlayer 11.0.4 Real Networks RealPlayer 11.0.3 Real Networks RealPlayer 11.0.2 Real Networks RealPlayer 11.0.1 Real Networks RealPlayer 14.0.5 Real Networks RealPlayer 14.0.3 Real Networks RealPlayer 14.0.2 Real Networks RealPlayer 14.0.1.633 Real Networks RealPlayer 14.0.1.609 Real Networks RealPlayer 14.0.1 Real Networks RealPlayer 14.0.0 Real Networks RealPlayer 11.1 Real Networks RealPlayer 11.0.2.2315 Real Networks RealPlayer 11.0.2.1744
Not Vulnerable:	Real Networks RealPlayer Enterprise 2.1.6 Real Networks RealPlayer 12 for Mac OS 12.0.0.1701 Real Networks RealPlayer 14.0.6

Real Networks RealPlayer Multiple Remote Vulnerabilities

Real Networks RealPlayer is prone to multiple security vulnerabilities.

Real Networks released an advisory regarding 11 security vulnerabilities in RealPlayer.

Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Other attacks may also be possible.

The following versions are affected:

RealPlayer for Windows SP 1.1.5 and previous
RealPlayer Enterprise 2.1.5 and previous
RealPlayer for Mac 12.0.0.1569

Real Networks RealPlayer Multiple Remote Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Real Networks RealPlayer Multiple Remote Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Real Networks RealPlayer Multiple Remote Vulnerabilities

References:

• RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (RealPlayer)
  
• RealPlayer Homepage (Real Networks)