Real Networks RealPlayer CVE-2013-4973 Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	61989
Class:	Boundary Condition Error
CVE:	CVE-2013-4973
Remote:	Yes
Local:	No
Published:	Aug 23 2013 12:00AM
Updated:	Aug 28 2013 04:09PM
Credit:	hamburgers maccoy
Vulnerable:	RealNetworks RealPlayer 14.0.2 RealNetworks RealPlayer 11.0 Real Networks RealPlayer Plus 9 Real Networks RealPlayer Plus 8 Real Networks RealPlayer Plus 11 Real Networks RealPlayer Plus 10 Real Networks RealPlayer for Windows 7.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Real Networks RealPlayer 8 Real Networks RealPlayer 10 6.0.12 .1662 Real Networks RealPlayer 15.2.71 Real Networks RealPlayer 15.1.13 Real Networks RealPlayer 14.0.7 Real Networks RealPlayer 14.0.2 633 Real Networks RealPlayer 11.0.5 Real Networks RealPlayer 11.0.4 Real Networks RealPlayer 11.0.3 Real Networks RealPlayer 11.0.2 Real Networks RealPlayer 11.0.1 Real Networks RealPlayer 10.5 Real Networks RealPlayer 10.0 + S.u.S.E. cvsup-16.1h-43.i586.rpm + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 Real Networks RealPlayer 8.0 Win32 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 SP1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows XP Home - Microsoft Windows XP Professional Real Networks RealPlayer 7.0 Win32 Real Networks RealPlayer 6.0 Win32 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 Real Networks RealPlayer 15.0.4.53 Real Networks RealPlayer 15.0.3.37 Real Networks RealPlayer 15.0 Real Networks RealPlayer 14.0.6 Real Networks RealPlayer 14.0.5 Real Networks RealPlayer 14.0.3 Real Networks RealPlayer 14.0.2 Real Networks RealPlayer 14.0.1.633 Real Networks RealPlayer 14.0.1.609 Real Networks RealPlayer 14.0.1 Real Networks RealPlayer 14.0.0 Real Networks RealPlayer 12.0.0.343 Real Networks RealPlayer 12.0.0.1548 Real Networks RealPlayer 12.0.0.1444 Real Networks RealPlayer 11.1 Real Networks RealPlayer 11.0.2.2315 Real Networks RealPlayer 11.0.2.1744 Real Networks RealPlayer 11
Not Vulnerable:

Real Networks RealPlayer CVE-2013-4973 Stack Based Buffer Overflow Vulnerability

RealPlayer is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data.

An attacker can leverage this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.

RealPlayer for Windows 16.0.2.32 and prior are vulnerable.

Real Networks RealPlayer CVE-2013-4973 Stack Based Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Real Networks RealPlayer CVE-2013-4973 Stack Based Buffer Overflow Vulnerability

References:

• RealPlayer Homepage (Real Networks)