335 matches found
CVE-2006-6847: Undefined Security Weakness
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument...
CVE-2006-6759: Undefined Security Weakness
A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service Internet Explorer crash by invoking the RealPlayer.Initialize method with certain arguments...
RealNetworks RealPlayer .mid处理远程拒绝服务漏洞
RealNetworks RealPlayer是一款流行的媒体播放软件。 RealNetworks RealPlayer处理.mid文件存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建如下的恶意页面，诱使用户使用RealPlayer访问，可导致应用程序崩溃： print "-----------------------------------------------------------------------" print " RealPlayer .mid file Denial of Service" print " author: shinnai" pri...
CVE-2006-1370: Undefined Security Weakness
Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast mbc file...
CVE-2005-2629
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...
CVE-2005-3677
CVE-2005-3677 describes a buffer overflow in RealNetworks RealPlayer 10/10.5 triggered by a crafted image in a RealPlayer Skin (RJS) file, allowing remote code execution. The description notes that details are sparse and it is unclear how this differs from CVE-2005-2629 and CVE-2005-2630, but ven...
CVE-2005-2936
Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file...
CVE-2005-2936: Undefined Security Weakness
Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file...
RealNetworks RealPlayer 10 - .smil Local Buffer Overflow
RealNetworks RealPlayer 10 - .smil Local Buffer Overflow / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in...
RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow
/ RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over the different OS's. Because of this, ...
CVE-2005-0455
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...
CVE-2005-0611
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...
CVE-2005-0455: Undefined Security Weakness
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...
CVE-2005-0611: Undefined Security Weakness
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...