RealNetworks RealPlayer Multiple Vulnerabilities - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2996

Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file...

Code injection

Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file...

CVE-2010-2996

CVE-2010-2996 affects RealNetworks RealPlayer 11.0–11.1 on Windows. The vulnerability is an array index error while parsing RealMedia .IVR headers, which can lead to remote code execution. The issue is tied to RealPlayer’s handling of malformed IVR data (indexing outside of an array, dereferencin...

CVE-2010-2996

Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file...

ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability

ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-166 August 26, 2010 -- CVE ID: CVE-2010-2996 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks...

RealPlayer畸形IVR对象索引代码执行漏洞

CVE ID: CVE-2010-2996 RealPlayer是一款流行的多媒体播放器。 RealPlayer在解析包含有畸形数据头的RealMedia .IVR文件时错误的信任了数据结构中的索引来查找对象列表。如果攻击者指定了数组边界外的索引，应用之后会从计算出的指针引用对象并调用，导致以当前用户的权限执行任意代码。 Real Networks RealPlayer 11.0 – 11.1 厂商补丁： Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RealNetworks RealPlayer security vulnerabilities

Memory corruption on FLV and IVR formats parsing...

RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...

RealNetworks RealPlayer IVR Overly Long Filename Code Execution (CVE-2009-0375)

RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats. The application can open media files from local file system or network servers. RealPlayer has an extensible nature that allows it to handle...

ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-009 January 21, 2010 -- CVE ID: CVE-2009-0376 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within RealPlayer's...

RealNetworks RealPlayer

A DLL file in RealNetworks RealPlayer 11 allows remote attackers to execute arbitrary code via a crafted Internet Video Recording IVR file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plug...

Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages Advisory ID: cisco-sa-20090715-uccx http://www.cisco.com/warp/public/707/cisco-sa-20090715-uccx.shtml Revision 1.0 For Public Release 2009 July 15 1600 UTC...

RealPlayer IVR Multiple Vulnerabilities

This host is running RealPlayer which is prone to IVR multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayerivrmultvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ RealPlayer IVR Multiple Vulnerabilities Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

RealPlayer IVR Multiple Vulnerabilities

RealPlayer is prone to IVR multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer IVR文件解析漏洞

BUGTRAQ ID: 33652 CVE ID：CVE-2009-0375 CVE-2009-0376 CNCVE ID：CNCVE-20090375 CNCVE-20090376 RealNetworks RealPlayer是一款流行的媒体播放程序。 RealNetworks RealPlayer处理IVR文件存在漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 Internet Video Recording IVR文件包含Realplayer播放和记录的媒体内容，远程攻击者构建恶意的IVR文件，当发送给目标用户时可导致触发任意代码执行。...

CVE-2009-0376

Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary...

Heap overflow

Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary...

CVE-2009-0375

CVE-2009-0375 corresponds to a remote code execution vulnerability in RealNetworks RealPlayer involving IVR file handling. The issue arises from incorrect handling of a filename length field in an IVR file, which can trigger a memory overwrite with a 0x00 byte, enabling arbitrary code execution. ...