Lucene search

K
freebsdFreeBSDF762CCBB-BAED-11DC-A302-000102CC8983
HistoryOct 25, 2007 - 12:00 a.m.

linux-realplayer -- multiple vulnerabilities

2007-10-2500:00:00
vuxml.freebsd.org
8

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

Secunia reports:

Multiple vulnerabilities have been reported in
RealPlayer/RealOne/HelixPlayer, which can be exploited by malicious
people to compromise a user’s system.
An input validation error when processing .RA/.RAM files can be
exploited to cause a heap corruption via a specially crafted
.RA/.RAM file with an overly large size field in the header.
An error in the processing of .PLS files can be exploited to cause
a memory corruption and execute arbitrary code via a specially
crafted .PLS file.
An input validation error when parsing .SWF files can be exploited
to cause a buffer overflow via a specially crafted .SWF file with
malformed record headers.
A boundary error when processing rm files can be exploited to
cause a buffer overflow.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlinux-realplayer= 10.0.5UNKNOWN
FreeBSDanynoarchlinux-realplayer< 10.0.9.809.20070726UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%