RealNetworks RealPlayer Media Properties Header Parsing Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...

RealNetworks RealPlayer Multi-Rate Audio Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...

RealNetworks RealPlayer Advanced Audio Coding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2010-5461

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer Enterprise version 2.1.2 Mac RealPlayer versions 11.0 through 11.1 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6 Description The issue is related to an array index error in the...

PT-2010-4470

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.0.1 Mac RealPlayer versions 11.0 through 11.1 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6 Description The issue allows remote attackers to execute...

PT-2010-5466

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 Linux RealPlayer version 11.0.2.1744 Description The issue is related to a heap-based buffer overflow in the cook codec, allowing remote attackers to execute...

PT-2010-5469

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.1.2 and 2.1.3 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6 Description The issue is related to a heap-based buffe...

PT-2010-5452

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 Mac RealPlayer versions 11.0 through 11.1 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6 Description The issue allows remote attackers to execute arbitrary code via malformed multi-rate dat...

PT-2010-4472

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.0.1 Mac RealPlayer versions 11.0 through 11.1 Linux RealPlayer version 11.0.2.1744 Description The issue allows remote attackers to execute arbitrary code or cause a...

PT-2010-5454

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 Mac RealPlayer versions 11.0 through 12.0.0.1444 Linux RealPlayer version 11.0.2.1744 Description The issue allows remote attackers to execute arbitrary code by...

PT-2010-5473

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.1 Mac RealPlayer versions 11.0 through 11.1 Linux RealPlayer version 11.0.2.1744 Description The issue is related to an integer overflow in the pnen3260.dll module...

PT-2010-5472

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise version 2.1.2 Description The issue allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local fil...

PT-2010-5455

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.1.2 and 2.1.3 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6 Description The issue allows remote attackers to execu...

PT-2010-5468

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.1.2 and 2.1.3 Description The issue is related to a heap-based buffer overflow that allows remote attackers to execute arbitrary...

PT-2010-5470

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a...

RealPlayer RealMedia文件ImageMap解析堆溢出漏洞

BUGTRAQ ID: 44847 RealPlayer是一款流行的多媒体播放器。 RealPlayer在解析RealMedia（.rm）文件中的ImageMap元素时存在整数截尾错误，用户受骗打开了恶意的媒体文件就可能触发堆溢出，导致执行任意代码。 Real Networks RealPlayer 1.1.5 Build 12.0.0.879 厂商补丁： Real Networks ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.real.com...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Real Networks RealPlayer < 14.0.2.633 (Build 12.0.1.633) Multiple Remote Code Execution Vulnerabilities

Binary data 5748.prm...

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

RealNetworks RealPlayer CDDA URI Initialization Vulnerability

This module exploits an initialization flaw within RealPlayer 11/11.1 and RealPlayer SP 1.0 - 1.1.4. An abnormally long CDDA URI causes an object initialization failure. However, this failure is improperly handled and uninitialized memory executed. Module Options msf use...