CVE-2008-3066

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

RealPlayer rjbdll.dll ActiveX控件Import方式栈溢出漏洞

BUGTRAQ ID: 30379 CVECAN ID: CVE-2008-3066 RealPlayer是一款流行的多媒体播放器。 RealPlayer的rjbdll.dll模块没有正确地删除媒体库文件，如果用户使用ActiveX控件FDC7A535-4070-4B92-A0EA-D9994BCC0DC5将有漏洞的文件导入到用户的媒体库的话，则在删除该文件时就会触发栈溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks -------------...

RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer / on the remote Windows host suffers from possibly several issues : - Heap memory corruption issues in several ActiveX controls can lead to arbitrary code execution. CVE-2008-1309 - An unspecified local resource reference...

RealNetworks RealPlayer SWF文件处理堆溢出漏洞

BUGTRAQ ID: 30370 CVECAN ID: CVE-2007-5400 RealPlayer是一款流行的多媒体播放器。 RealPlayer没有正确地处理Shockwave Flash（SWF）文件中的帧，如果用户受骗打开了恶意的SWF文件的话，就可以触发堆溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Build 6.0.12.1483 Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RealPlayer file deletion overflow vulnerability

Overview RealPlayer contains a buffer overflow vulnerability that may allow an attacker to execute code on a vulnerable system. Description RealPlayer media player that is distributed by RealNetworks. RealPlayer supports streaming and local media. Per the Zero Day Initiative advisory ZDI-08-046:...

ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-047 July 25, 2008 -- CVE ID: CVE-2008-1309 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

http://www.zerodayinitiative.com/advisories/ZDI-08-046

ZDI-08-046: RealNetworks RealPlayer Library File Deletion Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-046 July 25, 2008 -- CVE ID: ZDI-CAN-231 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow

====================================================================== Secunia Research 25/07/2008 - RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...

RealNetworks RealPlayer Library File Deletion Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

RealPlayer 10 &quot;.smil&quot; File Local Buffer Overflow Exploit

No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...

RealPlayer 9 *nix Local Privilege Escalation Exploit

No description provided by source. / rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the files in...

realplayer_console.rb.txt

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

RealPlayer rmoc3260.dll ActiveX Control Heap Corruption

This module exploits a heap corruption vulnerability in the RealPlayer ActiveX control. By sending a specially crafted string to the 'Console' property in the rmoc3260.dll control, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

RealNetworks RealPlayer rmoc3260.dll ActiveX控件内存破坏漏洞

BUGTRAQ ID: 28157 RealPlayer是一款流行的多媒体播放器，支持多种媒体格式。 RealPlayer的rmoc3260.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 rmoc3260.dll ActiveX控件没有正确地处理Console属性的输入参数，如果用户受骗访问了恶意站点的话，就可能触发内存破坏，导致执行任意指令。 Real Networks RealPlayer 11.0.1 build 6.0.14.794 临时解决方法： 在IE中禁用RealPlayer ActiveX控件，为以下CLSID设置kill bit：...

Design/Logic Flaw

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the 1 Console or 2 Controls property, which allows...

CVE-2008-1309

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the 1 Console or 2 Controls property, which allows...

CVE-2008-1309

The RealPlayer rmoc3260.dll ActiveX control in RealPlayer Enterprise/RealPlayer 10/10.5 and RealPlayer 11 (pre-builds) contains a heap-memory corruption flaw in the Console/Controls properties that enables arbitrary code execution or a browser crash after sending long strings, as described in CVE...

CVE-2008-1309

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the 1 Console or 2 Controls property, which allows...

RealPlayer ActiveX (rmoc3260.dll) Console Property Memory Corruption Arbitrary Code Execution

The remote host contains the Real Player ActiveX control, included with the RealPlayer media player, used to play content in a browser. The version of this control installed on the remote host reportedly contains a buffer overflow that can be leveraged by calls to various methods, such as...