RealPlayer rjbdll.dll ActiveX控件Import方式栈溢出漏洞

BUGTRAQ ID: 30379 CVECAN ID: CVE-2008-3066 RealPlayer是一款流行的多媒体播放器。 RealPlayer的rjbdll.dll模块没有正确地删除媒体库文件，如果用户使用ActiveX控件FDC7A535-4070-4B92-A0EA-D9994BCC0DC5将有漏洞的文件导入到用户的媒体库的话，则在删除该文件时就会触发栈溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks -------------...

RealNetworks RealPlayer rmoc3260.dll ActiveX控件内存破坏漏洞

BUGTRAQ ID: 28157 RealPlayer是一款流行的多媒体播放器，支持多种媒体格式。 RealPlayer的rmoc3260.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 rmoc3260.dll ActiveX控件没有正确地处理Console属性的输入参数，如果用户受骗访问了恶意站点的话，就可能触发内存破坏，导致执行任意指令。 Real Networks RealPlayer 11.0.1 build 6.0.14.794 临时解决方法： 在IE中禁用RealPlayer ActiveX控件，为以下CLSID设置kill bit：...

Real Networks RealPlayer 'rmoc3260.dll' ActiveX控件内存破坏漏洞

BUGTRAQ ID: 28157 CNCAN ID:CNCAN-2008031113 Real Networks RealPlayer是一款流行的媒体播放程序。 Real Networks RealPlayer包含的'rmoc3260.dll' ActiveX控件存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于'rmoc3260.dll' ActiveX控件，版本为6.0.10.4： 2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93 CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA...

RealPlayer 11未明缓冲区溢出漏洞

BUGTRAQ ID: 27091 CNCAN ID:CNCAN-2008010211 RealPlayer 11是一款流行的多媒体播放程序。 RealPlayer 11存在未明缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Real Networks RealPlayer 11 厂商解决方案 --------- 目前没有解决方案提供： http://www.realnetworks.com/...

CVE-2003-1509

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the defaul...

CVE-2003-1509

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818–6.0.11.853 are affected by CVE-2003-1509. The issue allows remote attackers to execute arbitrary script in the local security zone by embedding a script in a temporary file before the temp file ...

RealPlayer ierpplug.dll ActiveX控件播放列表名称栈溢出漏洞

BUGTRAQ ID: 26130 CVECAN ID: CVE-2007-5601 RealPlayer是一款流行的媒体播放器，支持多种媒体格式。 RealPlayer的MPAMedia.dll库所提供的RealPlayer数据库组件在处理播放列表名时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 由于可使用ierpplug.dll所提供的IERPCtl ActiveX控件将本地文件导入到RealPlayer中指定的播放列表，因此如果用户受骗访问了恶意网页并导入了恶意文件的话，就可以触发这个溢出，导致拒绝服务或执行任意指令。 Real Networks RealPlayer 1...

RealPlayer ierpplug.dll ActiveX Control Import Playlist Name Stack Buffer Overflow Vulnerability

Description RealPlayer is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks of user-supplied input before copying it to an insufficiently sized memory buffer. Attackers can exploit this issue to execute arbitrary code in the context of the...

RealPlayer/HelixPlayer ParseWallClockValue函数栈缓冲区溢出漏洞

BUGTRAQ ID: 24658 CVECAN ID: CVE-2007-3410 RealPlayer是一款非常流行的媒体播放器，支持多种格式；HelixPlayer是其开源版本。 RealPlayer/HelixPlayer播放器的墙壁时钟在处理日期格式时存在缓冲区漏洞，远程攻击者可能利用此漏洞控制用户机器。 墙壁时钟（wallclock）功能没有正确地处理HH:mm:ss.f时间格式： 924 HXRESULT 925 SmilTimeValue::parseWallClockValueREFconst char pCh 926 ... 957 char buf10; /...

Real Networks Helix RTSP Server buffer overflow

Heap buffer overflow on parsing RTSP REPLY request...

CVE-2006-6026

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service application crash or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword fie...

CVE-2006-6026

CVE-2006-6026 : RealNetworks Helix Server/Helix Mobile Server (pre-11.1.3) and Helix DNA Server (11.0 and 11.1) suffer a heap-based buffer overflow via a DESCRIBE request containing an invalid LoadTestPassword field. An unauthenticated, remote attacker could crash the server or execute arbitrary ...

CVE-2006-6026

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service application crash or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword fie...

CVE-2006-6026: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service application crash or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword fie...

CVE-2005-4126

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely...

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...

CVE-2004-0550

Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." period characters...

CVE-2004-0550

CVE-2004-0550 describes a buffer overflow in RealNetworks RealPlayer 10 that allows remote code execution when a user visits a URL containing a large sequence of periods. Affected: RealPlayer 10 (RealNetworks). Exploitation described as remote and requires no user interaction in the NVD entry, wi...

[Full-Disclosure] iDEFENSE Security Advisory 06.10.04: Real Networks RealPlayer URL Parsing Buffer Overflow Vulnerability

Real Networks RealPlayer URL Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.10.04 www.idefense.com/application/poi/display?id=109&type=vulnerabilities June 10, 2004 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc. Fo...