RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
BID:9580
Info
RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
| Bugtraq ID: | 9580 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2004 12:00AM |
| Updated: | Feb 04 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Jouko Pynnönen. |
| Vulnerable: |
RealNetworks RealOne Player version 2.0 for Windows RealNetworks RealOne Player 6.0.11 .868 RealNetworks RealOne Player 6.0.11 .853 RealNetworks RealOne Player 6.0.11 .841 RealNetworks RealOne Player 6.0.11 .830 RealNetworks RealOne Player 6.0.11 .818 RealNetworks RealOne Player 2.0 RealNetworks RealOne Player 1.0 RealNetworks RealOne Enterprise Desktop 6.0.11 .774 RealNetworks RealOne Desktop Manager |
| Not Vulnerable: |
RealNetworks RealPlayer 10.0 v6.0.12.690 RealNetworks RealOne Player 6.0.11 .872 |
Discussion
RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
RealPlayer/RealOne Players have been reported prone to a directory traversal vulnerability. The issue occurs within the RMP file processing routines of affected versions of the player.
RealPlayer/RealOne Players have been reported prone to a directory traversal vulnerability. The issue occurs within the RMP file processing routines of affected versions of the player.
Exploit / POC
RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
Solution:
The vendor has issued fixed to address this and other vulnerabilities. Users are advised to contact RealNetworks Customer Support to obtain fixes:
http://service.real.com/helix/
Users may also obtain fixed directly through the product interface. For RealOne Player v2 the following actions can be carried out to obtain fixes:
1. In the Tools menu select Check for Update.
2. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
3. Click the Install button to download and install the update.
Real Networks has also released RealPlayer 10 version 6.0.12.690 and RealOne Player 6.0.11.872 that address this issue. Please see the vendor homepage, listed in the reference section, for details on obtaining the updates.
Solution:
The vendor has issued fixed to address this and other vulnerabilities. Users are advised to contact RealNetworks Customer Support to obtain fixes:
http://service.real.com/helix/
Users may also obtain fixed directly through the product interface. For RealOne Player v2 the following actions can be carried out to obtain fixes:
1. In the Tools menu select Check for Update.
2. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
3. Click the Install button to download and install the update.
Real Networks has also released RealPlayer 10 version 6.0.12.690 and RealOne Player 6.0.11.872 that address this issue. Please see the vendor homepage, listed in the reference section, for details on obtaining the updates.
References
RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
References:
References:
- RealNetworks, Inc. Releases Update to Address Security Vulnerabilities. (Real Networks)
- RealPlayer Homepage (Real Networks)
- Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer ("NGSoftware Insight Security Research"