Design/Logic Flaw

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors...

CVE-2010-0125

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors...

CVE-2010-2999

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a malformed MLLT atom in an...

CVE-2010-4381

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file...

CVE-2010-4395

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data...

CVE-2010-4397

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file...

CVE-2010-0125

CVE-2010-0125 affects RealNetworks RealPlayer products: RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0–12.0.0.1444. The vulnerability lies in parsing spectral data in AAC audio content, with unspecified impact and remote attack potential as sta...

CVE-2010-4381

CVE-2010-4381 describes a heap-based buffer overflow in RealNetworks RealPlayer products (RealPlayer 11.x, RealPlayer SP, RealPlayer Enterprise, and Mac RealPlayer up to 12.0.0.1444) that is triggered by a crafted AAC file. The vulnerability permits remote attackers to achieve unspecified impact....

CVE-2010-4395

RealNetworks RealPlayer contains a heap-based buffer overflow in the AAC decoding path that affects RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and Linux RealPlayer 11.0.2.1744, allowing remote code execution via a crafted conditional component in AAC frame data. The related OpenVAS/NVD entrie...

CVE-2010-4397

CVE-2010-4397 affects RealNetworks RealPlayer 11.0–11.1 (and variants on Windows, Mac, and Linux) where an integer overflow in pnen3260.dll occurs while parsing the TIT2 atom in AAC files. This leads to remote code execution if a crafted AAC file is opened. The vulnerability is documented across ...

PT-2010-1941

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.4 RealPlayer Enterprise version 2.1.2 Mac RealPlayer versions 11.0 through 12.0.0.1444 Description The issue is related to the improper parsing of spectral data in AA...

VUPEN Security Research - RealPlayer AAC Data Handling Buffer Overflow Vulnerability (VUPEN-SR-2010-005)

VUPEN Security Research - RealPlayer AAC Data Handling Buffer Overflow Vulnerability VUPEN-SR-2010-005 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "RealPlayer is a media player available to play, manage and download all your mp3, flash and video files" from...

CVE-2010-2999: Undefined Security Weakness

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a malformed MLLT atom in an...

CVE-2010-0125: Undefined Security Weakness

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors...

CVE-2010-4395: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data...

CVE-2010-4381: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file...

CVE-2010-4397: Undefined Security Weakness

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file...

PT-2010-5458

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.4 RealPlayer Enterprise version 2.1.2 Mac RealPlayer versions 11.0 through 12.0.0.1444 Description The issue is related to a heap-based buffer overflow that can be...

RealNetworks RealPlayer AAC TIT2 Atom Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

PT-2010-5471

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 Linux RealPlayer version 11.0.2.1744 Description The issue allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data...