RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability
BID:6229
Info
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability
| Bugtraq ID: | 6229 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2002 12:00AM |
| Updated: | Nov 22 2002 12:00AM |
| Credit: | Discovery of this vulnerability is credited to NGSSoftware. |
| Vulnerable: |
RealNetworks RealPlayer 8.0 Win32 RealNetworks RealPlayer 7.0 Win32 RealNetworks RealPlayer 6.0 Win32 RealNetworks RealPlayer G2 RealNetworks RealOne Player 2.0 RealNetworks RealOne Player |
| Not Vulnerable: | |
Discussion
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability
RealPlayer is the freely available Real Media format player. It is distributed and maintained by RealNetworks.
A buffer overflow has been reported in the Real products. When one of the affected products is used to play a file with a name of excessively large length and one of two specific operations are performed in the in the "Now Playing" menu, the overflow occurs. This could result in the execution of arbitrary code embedded in the file name.
** Reports indicate that the patch for this issue supplied by Real Networks does not correct the problem.
RealPlayer is the freely available Real Media format player. It is distributed and maintained by RealNetworks.
A buffer overflow has been reported in the Real products. When one of the affected products is used to play a file with a name of excessively large length and one of two specific operations are performed in the in the "Now Playing" menu, the overflow occurs. This could result in the execution of arbitrary code embedded in the file name.
** Reports indicate that the patch for this issue supplied by Real Networks does not correct the problem.
Exploit / POC
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability
Solution:
Real Networks has made a fix available.
** Note that reports indicate that the patch supplied by Real Networks for this issue does not rectify the problem.
RealNetworks RealPlayer G2
RealNetworks RealOne Player
RealNetworks RealOne Player 2.0
RealNetworks RealPlayer 6.0 Win32
RealNetworks RealPlayer 7.0 Win32
RealNetworks RealPlayer 8.0 Win32
Solution:
Real Networks has made a fix available.
** Note that reports indicate that the patch supplied by Real Networks for this issue does not rectify the problem.
RealNetworks RealPlayer G2
-
Real Networks skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
RealNetworks RealOne Player
-
Real Networks skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
RealNetworks RealOne Player 2.0
-
Real Networks skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
RealNetworks RealPlayer 6.0 Win32
-
Real Networks skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
RealNetworks RealPlayer 7.0 Win32
-
Real Networks skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
RealNetworks RealPlayer 8.0 Win32
-
Real Networks skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
References
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability
References:
References:
- RealPlayer Buffer Overrun Vulnerability (Real Networks)
- RealPlayer security fix is faulty (The Register)