CVE-2010-3001

CVE-2010-3001 affects RealNetworks RealPlayer ActiveX control in the IE plugin for RealPlayer 11.0–11.1 and RealPlayer SP 1.0–1.1.4 on Windows. The root cause involves how RealPlayer handles multiple instantiations of the ActiveX plug‑in across multiple Internet Explorer windows, enabling remote ...

CVE-2010-3001

Unspecified vulnerability in an ActiveX control in the Internet Explorer IE plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."...

CVE-2010-0117

RealNetworks RealPlayer on Windows (11.0–11.1 and RealPlayer SP 1.0–1.1.4) is affected by CVE-2010-0117 due to improper handling of dimensions during YUV420 transformations in MP4 content. The underlying issue can allow remote attackers to execute arbitrary code by delivering crafted MP4 files, a...

CVE-2010-3002

Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors...

CVE-2010-0116

CVE-2010-0116 affects RealNetworks RealPlayer for Windows (RealPlayer 11.0–11.1 and RealPlayer SP 1.0–1.1.4). The flaw is an integer overflow in QCP parsing that may cause a heap-based buffer overflow, enabling remote code execution. OpenVAS/Nessus listings corroborate RealPlayer Windows vulnerab...

CVE-2010-0120

CVE-2010-0120 corresponds to a heap-based buffer overflow in RealNetworks RealPlayer 11.0–11.1 and RealPlayer SP 1.0–1.1.4 on Windows. The vulnerability arises from processing large size values in QCP audio content and allows remote arbitrary-code execution. Connected sources (OpenVAS/NVD/Nessus ...

CVE-2010-0116

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow...

CVE-2010-2996: Improper Control of Generation of Code

Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file...

RealPlayer畸形IVR对象索引代码执行漏洞

CVE ID: CVE-2010-2996 RealPlayer是一款流行的多媒体播放器。 RealPlayer在解析包含有畸形数据头的RealMedia .IVR文件时错误的信任了数据结构中的索引来查找对象列表。如果攻击者指定了数组边界外的索引，应用之后会从计算出的指针引用对象并调用，导致以当前用户的权限执行任意代码。 Real Networks RealPlayer 11.0 – 11.1 厂商补丁： Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability

ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-166 August 26, 2010 -- CVE ID: CVE-2010-2996 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks...

CVE-2010-3000: Undefined Security Weakness

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...

CVE-2010-3001: Undefined Security Weakness

Unspecified vulnerability in an ActiveX control in the Internet Explorer IE plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."...

CVE-2010-0117: Undefined Security Weakness

RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content...

CVE-2010-0116: Undefined Security Weakness

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow...

CVE-2010-0120: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content...

CVE-2010-3002: Undefined Security Weakness

Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors...

ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities

ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-167 August 26, 2010 -- CVE ID: CVE-2010-3000 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks...

Real Networks RealPlayer SP < 1.1.5 Multiple Vulnerabilities

Binary data 5650.prm...

RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities : - A RealPlayer malformed 'IVR' pointer index code execution vulnerability exists. CVE-2010-2996, CVE-2010-2998 - A RealPlayerActiveX unauthorized file acces...

RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the module responsible for handling the FLV file format. While parsing the...