Lucene search

K
nessusTenable5325.PRM
HistoryJan 22, 2010 - 12:00 a.m.

Real Networks RealPlayer < RealPlayer SP 1.0.5 Multiple Vulnerabilities

2010-01-2200:00:00
Tenable
www.tenable.com
6

The remote host is running a version of RealPlayer earlier than RealPlayer SP 1.0.5. Such versions are potentially affected by multiple vulnerabilities :

  • A RealPlayer ‘ASM’ Rulebook heap-based buffer overflow. (CVE-2009-4241)

  • A RealPlayer ‘GIF’ file heap overflow. (CVE-2009-4242)

  • A RealPlayer media overflow (http chunck encoding). (CVE-2009-4243)

  • A RealPlayer ‘IVR’ file processing buffer overflow. (CVE-2009-0375)

  • A RealPlayer ‘IVR’ file heap overflow. (CVE-2009-0376)

  • A RealPlayer ‘SIPR’ codec heap overflow. (CVE-2009-4244)

  • A RealPlayer compressed ‘GIF’ heap overflow. (CVE-2009-4245)

  • A RealPlayer ‘SMIL’ parsing heap overflow. (CVE-2009-4257)

  • A RealPlayer skin parsing stack overflow. (CVE-2009-4246)

  • A RealPlayer ‘ASM’ RuleBook array overflow. (CVE-2009-4247)

  • A RealPlayer ‘rtsp’ ‘set_parameter’ buffer overflow. (CVE-2009-4248)

Note that different versions are affected by different vulnerabilities.

Binary data 5325.prm
VendorProductVersionCPE
realnetworksrealplayercpe:/a:realnetworks:realplayer

References