Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities
BID:9579
Info
Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities
| Bugtraq ID: | 9579 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-0258 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2004 12:00AM |
| Updated: | Jul 12 2009 02:06AM |
| Credit: | The disclosure of these issues has been credited to Mark Litchfield. |
| Vulnerable: |
RealNetworks RealPlayer 10.0 BETA RealNetworks RealPlayer 8.0 Win32 RealNetworks RealPlayer 8.0 Unix RealNetworks RealPlayer 8.0 Mac RealNetworks RealOne Player version 2.0 for Windows RealNetworks RealOne Player 6.0.11 .868 RealNetworks RealOne Player 6.0.11 .853 RealNetworks RealOne Player 6.0.11 .841 RealNetworks RealOne Player 6.0.11 .830 RealNetworks RealOne Player 6.0.11 .818 RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0 RealNetworks RealOne Enterprise Desktop 6.0.11 .774 RealNetworks RealOne Desktop Manager |
| Not Vulnerable: |
RealNetworks RealPlayer 10.0 v6.0.12.690 RealNetworks RealOne Player 6.0.11 .872 |
Discussion
Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities
It has been reported that various RealPlayer/RealOne Player releases are prone to multiple exploitable stack and heap overrun vulnerabilities. This is due to insufficient bounds checking when handling malformed files of various supported file types. Exploitation would permit execution of arbitrary code in the context of the user invoking the vulnerable player.
It has been reported that various RealPlayer/RealOne Player releases are prone to multiple exploitable stack and heap overrun vulnerabilities. This is due to insufficient bounds checking when handling malformed files of various supported file types. Exploitation would permit execution of arbitrary code in the context of the user invoking the vulnerable player.
Exploit / POC
Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities
Solution:
The vendor has issued fixed to address these and other vulnerabilities. Users are advised to contact RealNetworks Customer Support to obtain fixes:
http://service.real.com/helix/
Users may also obtain fixed directly through the product interface.
For RealOne Player, RealOne Player v2 and RealPlayer 10 Beta the following actions can be carried out to obtain fixes:
1. In the Tools menu select Check for Update.
2. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
3. Click the Install button to download and install the update.
For RealPlayer 8 (version 6.0.9.584) the following actions can be carried out to obtain fixes:
1. Go to the Help menu.
2. Select "Check for Update".
3. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
4. Click the Install button to download and install the update
Real Networks has also released RealPlayer 10 version 6.0.12.690 and RealOne Player 6.0.11.872 that address this issue. Please see the vendor homepage, listed in the reference section, for details on obtaining the updates.
Solution:
The vendor has issued fixed to address these and other vulnerabilities. Users are advised to contact RealNetworks Customer Support to obtain fixes:
http://service.real.com/helix/
Users may also obtain fixed directly through the product interface.
For RealOne Player, RealOne Player v2 and RealPlayer 10 Beta the following actions can be carried out to obtain fixes:
1. In the Tools menu select Check for Update.
2. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
3. Click the Install button to download and install the update.
For RealPlayer 8 (version 6.0.9.584) the following actions can be carried out to obtain fixes:
1. Go to the Help menu.
2. Select "Check for Update".
3. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
4. Click the Install button to download and install the update
Real Networks has also released RealPlayer 10 version 6.0.12.690 and RealOne Player 6.0.11.872 that address this issue. Please see the vendor homepage, listed in the reference section, for details on obtaining the updates.
References
Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities
References:
References:
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)
- RealPlayer Homepage (Real Networks)
- Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer ("NGSoftware Insight Security Research"