Multiple Unspecified RealOne Player Buffer Overflow Vulnerabilities

Bugtraq ID:	6361
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 11 2002 12:00AM
Updated:	Dec 11 2002 12:00AM
Credit:	These issues were announced by Real Networks but may have been discovered independently.
Vulnerable:	RealNetworks RealOne Player Gold for Windows 6.0.10 .505 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional RealNetworks RealOne Player 2.0 RealNetworks RealOne Player
Not Vulnerable:

Multiple Unspecified RealOne Player Buffer Overflow Vulnerabilities

RealNetworks has released an advisory stating that they are in the process of fixing multiple exploitable buffer overflow conditions in RealOne Player. Exploitation of these issues may allow an attacker to execute arbitrary code on systems running the vulnerable software.

Some of these issues may have been previously publicized. RealNetworks has stated that they will released an update to address these issues in RealOne Player.

Multiple Unspecified RealOne Player Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Unspecified RealOne Player Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Unspecified RealOne Player Buffer Overflow Vulnerabilities

References:

• RealNetworks undertakes comprehensive security review (Real Networks)