RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow

This module exploits a stack buffer overflow in RealOne Player V2 Gold Build 6.0.11.853 and RealPlayer 10.5 Build 6.0.12.1483. By sending an overly long string to the "Import" method, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/downlo...

realpdos_au.txt

Type : DOS attack when processing a malformed AU file. Affected : Realplayer 11 ActiveX on Win Vista and Win XP SP2 Date : 01-12-2007 Author : Adonis, Abed safehack.com Link : http://www.safehack.com/Advisory/realpdosau.txt Disclaimer ---------- The information in this text is believed to be true...

RealPlayer 11 - .au Denial of Service

RealPlayer 11 - .au Denial of Service RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+...

RealPlayer 11 Malformed AU File Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= RealPlayer 11 Malformed AU File Denial of Service Exploit ========================================================= RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka...

RealPlayer 11 - '.au' Denial of Service

RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+...

RealMedia RealPlayer Ierpplug.DLL PlayerProperty ActiveX Control Buffer Overflow Vulnerability

No description provided by source. !-- written by e.b. -- html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 999999 s=s+s; var obj = new ActiveXObject"IERPCTL.IERPCTL"; //FDC7A535-4070-4B92-A0EA-D9994BCC0DC5...

real-overflow.txt

There are multiple stack overflows in the ierpplug.dll ActiveX Control. These issues were originally discovered by shinnai, http://www.securityfocus.com/bid/22811 and http://www.securityfocus.com/bid/21802. I am adding the Import and PlayerProperty functions to the list. This was tested on Window...

richfx-overflow.txt

There are multiple stack overflows in the RichFX nprfxins.dll ActiveX Control. I almost positive that this control was installed with RealNetworks RealPlayer. This was tested on Windows XP SP2 fully patched and IE6. This control is marked safe for scripting. I have not tested code execution. PoC ...

RealMedia RealPlayer 10.511 - ierpplug.dll PlayerProperty ActiveX Control Buffer Overflow

RealMedia RealPlayer 10.511 - ierpplug.dll PlayerProperty ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/26586/info The RealPlayer ActiveX control is prone to a buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before...

RealPlayer 6.0.10 to 6.0.14 integer overflow analysis-vulnerability warning-the black bar safety net

This morning, the eggplant just tell me cnbeta is hanging horse, use the recent emergence of various loopholes. One of the more interesting is that one of the scripts in use have not seen the realplayer overflow. Horror! First from the realplayer directory rpplugins\ierpplug.dll in IIERPCtl. The...

RealMedia RealPlayer 10.5/11 - 'ierpplug.dll' PlayerProperty ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/26586/info The RealPlayer ActiveX control is prone to a buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. A remote attacker may exploit this...

RealPlayer ierpplug.dll ActiveX Exploit

No description provided by source. script language="javascript" eval"function RealExploit var user = navigator.userAgent.toLowerCase; ifuser.indexOf"msie 6"==-1&&user.indexOf"msie 7"==-1 return; ifuser.indexOf"nt 5."==-1 return; VulObject = "IER" + "PCtl.I" + "ERP" + "Ctl.1"; try...

RealNetworks RealPlayer Playlist Handling Buffer Overflow (CVE-2007-5601)

RealNetworks RealPlayer and RealOne Player are media player applications that are capable of playing back numerous multimedia file formats. A buffer overflow vulnerability has been reported in RealNetworks RealPlayer application. The vulnerability is due to an error in a RealPlayer ActiveX contro...

ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability

ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-063.html October 25, 2007 -- CVE ID: CVE-2007-2264 -- Affected Vendor: RealNetworks RealPlayer version 10.5 -- Affected Products: RealPlayer 6.x -- TippingPointTM IPS...

RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability

ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-061.html October 25, 2007 -- CVE ID: CVE-2007-2263 -- Affected Vendor: RealNetworks -- Affected Products: RealNetworks RealPlayer version 10.5 -- TippingPointT...

ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability

ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-062.html October 25, 2007 -- CVE ID: CVE-2007-4599 -- Affected Vendor: RealNetworks -- Affected Products: RealNetworks RealPlayer version 10.5 -- TippingPointTM IPS...

CVE-2007-2263

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF Flash file with malformed record headers...

Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF Flash file with malformed record headers...

Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file...