286 matches found
iDefense Security Advisory 12.10.10: RealNetworks RealPlayer RealAudio Codec Memory Corruption Vulnerability
iDefense Security Advisory 12.10.10 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 10, 2010 I. BACKGROUND RealPlayer is RealNetworks's media player product used to render video and other media. For more information, visit http://www.real.com/. II. DESCRIPTION Remote exploitation of a...
RealNetworks RealPlayer Media Properties Header Parsing Remote Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...
RealNetworks RealPlayer ImageMap Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...
RealPlayer RealMedia文件ImageMap解析堆溢出漏洞
BUGTRAQ ID: 44847 RealPlayer是一款流行的多媒体播放器。 RealPlayer在解析RealMedia（.rm）文件中的ImageMap元素时存在整数截尾错误，用户受骗打开了恶意的媒体文件就可能触发堆溢出，导致执行任意代码。 Real Networks RealPlayer 1.1.5 Build 12.0.0.879 厂商补丁： Real Networks ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.real.com...
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...
Design/Logic Flaw
Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...
RealNetworks RealPlayer Malformed IVR Pointer Index Remote Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...
RealNetworks RealPlayer Multiple Vulnerabilities - Windows
RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file...
CVE-2010-2996
Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file...
RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...
RealNetworks RealPlayer RealMedia Security Bypass (CVE-2005-2055)
RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. A vulnerability exists in the way that RealNetworks...
VideoLAN VLC ReadRealIndex RealMedia Integer Overflow (CVE-2008-5276)
There exists a vulnerability in VideoLAN VLC Media Player. The vulnerability is caused due to an integer overflow when playing a specially crafted RealMedia .rm file. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to play a specially crafted RealMedia file...
VLC: Multiple vulnerabilities
Background VLC is a cross-platform media player and streaming server. Description Tobias Klein reported the following vulnerabilities: A stack-based buffer overflow when processing CUE image files in modules/access/vcd/cdrom.c CVE-2008-5032. A stack-based buffer overflow when processing RealText...
FreeBSD Ports: vlc-devel
The remote host is missing an update to the system as announced in the referenced advisory. VID acf80afa-c3ef-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID acf80afa-c3ef-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
VLC Media Player < 0.9.8a RealMedia Processing Remote Integer Overflow (deprecated)
Binary data 4785.prm...
FreeBSD Ports: vlc-devel
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VLC Media Player 0.9.x < 0.9.8a RealMedia Processing Remote Integer Overflow
The version of VLC media player 0.9 installed on the remote host is earlier than 0.9.8a. Such versions contain a heap-based integer buffer overflow in the Real demuxer plugin librealplugin.'. If an attacker can trick a user into opening a specially crafted RealMedia .rm file, arbitrary code could...
FreeBSD : vlc -- arbitrary code execution in the RealMedia processor (acf80afa-c3ef-11dd-a721-0030843d3802)
Tobias Klein from TrapKit reports : The VLC media player contains an integer overflow vulnerability while parsing malformed RealMedia .rm files. The vulnerability leads to a heap overflow that can be exploited by a remote attacker to execute arbitrary code in the context of VLC media player...
CVE-2008-5276
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia .rm file that triggers a heap-based buffer overflow...