CVE-2011-4258

RealNetworks RealPlayer prior to 15.0.0 is affected by CVE-2011-4258 due to improper parsing of an IVR MLTI chunk length, allowing remote code execution. Exploitation typically requires user interaction (visit a malicious page or open a crafted file). Vendor advisory indicates the flaw is in the ...

RealNetworks RealPlayer IVR Handling Heap Buffer Overflow

A heap buffer overflow vulnerability has been reported in RealNetworks RealPlayer. RealPlayer is a media player developed by RealNetworks, Inc. The application is capable of playing back numerous formats of multimedia files. Successful exploitation of this vulnerability may enable an attacker to...

RealPlayer for Windows < Build 12.0.1.647 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities : - The OpenURLInDefaultBrowser method will open and execute the first parameter based on the operating system's default handler for the filetype and is accessible...

RealNetworks RealPlayer IVR File Processing Buffer Overflow Vulnerability (Windows)

This host is installed with RealPlayer which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerivrbofvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ RealNetworks RealPlayer IVR File Processing Buffer Overflow Vulnerability Windows Authors: Madhuri D Copyright:...

RealNetworks RealPlayer IVR File Processing Buffer Overflow Vulnerability - Windows

RealPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1525

RealPlayer is affected by a heap-based buffer overflow in rvrender.dll that can be triggered by a crafted IVR file to execute arbitrary code remotely. Vulnerable products include RealPlayer 11.0–11.1 and 14.0.0–14.0.2, and RealPlayer SP 1.0–1.1.5. The issue arises from processing IVR frames and h...

CVE-2011-1525

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording IVR file...

RealPlayer buffer overflow

Buffer overflow on IVR files parsing...

India to Increase Phone Banking Security Starting Next Month !

Starting with January 1st, 2011, Indian banks will require an additional security code in order to authorise phone banking transactions, according to regulatory guidelines issued by the Reserve Bank of India RBI. Known as one-time passwords OTP, these codes are part of what is known as two-factor...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwin03dec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Dec10 Authors: Sooraj KS Updated By: Sooraj KS on...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file...

CVE-2010-4390

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Design/Logic Flaw

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...

CVE-2010-2998

CVE-2010-2998 : RealNetworks RealPlayer (Windows) is affected by an array index error in parsing RealMedia IVR data, leading to remote code execution. Impact: arbitrary code could be run in the context of the logged-in user when a vulnerable RealPlayer instance processes a malformed IVR file. Aff...

CVE-2010-2998

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...

RealNetworks RealPlayer Malformed IVR Pointer Index Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...