SUSE-SA:2005:014: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:014 RealPlayer. Two security problems were found in the media player RealPlayer: - CVE-2005-0455: A buffer overflow in the handling of .smil files. - CVE-2005-0611: A buffer overflow in the handling of .wav files. Both buffer...

RealPlayer 10 ".smil" File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== RealPlayer 10 ".smil" File Local Buffer Overflow Exploit ======================================================== / RealPlayer .smil file buffer overflow Coded by email protected &...

CVE-2004-1481

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 6.0.12.1040 and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based...

CVE-2005-0189

Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 6.0.12.1040 and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument...

CVE-2005-0191

Off-by-one buffer overflow in the processing of tags in Real Metadata Package RMP files in RealPlayer 10.5 6.0.12.1040 and earlier could allow remote attackers to execute arbitrary code via a long tag...

CVE-2005-0190

Directory traversal vulnerability in RealPlayer 10.5 6.0.12.1040 and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages RMP file with a FILENAME tag containing .. dot dot sequences in a filename that ends with a ? question mark and an allowed file extension e.g...

RealPlayer 10.5 Denial of Service and possible Overflow

Well i was trying to find something in .ra format. I found something interestingI think I had an old .Ra and tryed to change some information of the filevia an hexadecimal editor: All my .ra files begin always with the following code: .ra......ra4.........r.........................+........ If i...

RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)

NGSSoftware Insight Security Research Advisory Name: RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability Systems Affected: RealPlayer 10.5 6.0.12.1040 and older Severity: High Vendor URL: http://www.real.com/ Author: John Heasman [email protected] Date of Public Advisory: 19th January...

RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)

NGSSoftware Insight Security Research Advisory Name: RealPlayer Arbitrary File Deletion Vulnerability Systems Affected: RealPlayer 10.5 6.0.12.1040 and older Severity: High Vendor URL: http://www.real.com/ Author: John Heasman [email protected] Date of Public Advisory: 19th January 2004 Adviso...

CVE-2004-1481

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 6.0.12.1040 and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based...

RealPlayer Unspecified Remote Buffer Overflow

Binary data 2472.prm...

RealPlayer Skin File Remote Buffer Overflow

According to its build number, the installed version of RealPlayer / RealOne Player for Windows may allow an attacker to execute arbitrary code on the remote host, with the privileges of the user running RealPlayer because of an overflow vulnerability in the third-party compression library...

RealPlayer Skin File Handling Buffer Overflow

Binary data 2381.prm...

EEYE: RealPlayer Zipped Skin File Buffer Overflow

RealPlayer Zipped Skin File Buffer Overflow Release Date: October 27, 2004 Date Reported: October 11, 2004 Severity: High Code Execution Vendor: RealNetworks Systems Affected: For Microsoft Windows RealPlayer 10.5 6.0.12.1053 and earlier RealPlayer 10 RealOne Player v2 RealOne Player v1 Overview:...

CVE-2005-0189

Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 6.0.12.1040 and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument...

EEYE: RealPlayer pnen3260.dll Heap Overflow

RealPlayer pnen3260.dll Heap Overflow Release Date: October 1, 2004 Date Reported: August 09, 2004 Severity: High Remote Code Execution Vendor: RealNetworks Systems Affected: Windows: RealPlayer 10.5 6.0.12.1040 and earlier RealPlayer 10 RealPlayer 8 Local Playback RealOne Player V2 RealOne Playe...

CVE-2005-0190

Directory traversal vulnerability in RealPlayer 10.5 6.0.12.1040 and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages RMP file with a FILENAME tag containing .. dot dot sequences in a filename that ends with a ? question mark and an allowed file extension e.g...

CVE-2004-0550

Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." period characters...

EEYE: RealPlayer embd3260.dll Error Response Heap Overflow

RealPlayer embd3260.dll Error Response Heap Overflow Release Date: June 10, 2004 Date Reported: May 14, 2004 Severity: High Remote Code Execution Vendor: RealNetworks Systems Affected: RealOne Player RealOne Player v2 RealPlayer 10 RealPlayer 8 RealPlayer Enterprise Description: eEye Digital...

Directory traversal in RealPlayer allows code execution

OVERVIEW ======== RealPlayer is a popular multimedia player developed by RealNetworks. One of its features are RMP files, RealJukebox Metadata Packages. These are XML formatted files which may contain e.g. playlists, references to skin files .rjs, and information about related web pages. A...