RealPlayer rjbdll.dll ActiveX Control file import buffer overflow

Added: 08/01/2008 CVE: CVE-2008-3066 BID: 30379 OSVDB: 48286 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem A buffer overflow vulnerability in an ActiveX control in rjbdll.dll allows command...

RealPlayer rjbdll.dll ActiveX Control file import buffer overflow

Added: 08/01/2008 CVE: CVE-2008-3066 BID: 30379 OSVDB: 48286 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem A buffer overflow vulnerability in an ActiveX control in rjbdll.dll allows command...

RealPlayer: SWF Frame Handling Buffer Overflow

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

Critical: Red Hat Security Advisory: RealPlayer security update

RealPlayer 10.0.9 as shipped in Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary, contains a security flaw and should not be used. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 17 September 2008 We have updated this...

RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability

RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: An illegal resource reference vulnerability exists in the ActiveX Control of RealNetworks RealPlayer. For exploiting the vulnerability, the attacker may buil...

RealPlayer multiple security vulnerabilities

Buffer overflow on SWF files parsing. ActiveX memory corruption. ActiveX arbitrary files deletion...

Preemptive Protection against RealNetworks RealPlayer ActiveX Import Method Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in RealNetworks RealPlayer application. RealNetworks RealPlayer and RealOne Player are media player applications that are capable of playing back numerous multimedia file formats. A remote attacker may exploit this issue to execute arbitrary code ...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

Heap overflow

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

Design/Logic Flaw

Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a "Local resource reference vulnerability."...

CVE-2007-5400

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

CVE-2008-3064

Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a "Local resource reference vulnerability."...

CVE-2007-5400

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

CVE-2008-3066

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

CVE-2008-3066

RealPlayer RealPlayer Enterprise/RealPlayer 10 and 10.5 contain a stack-based buffer overflow in the ActiveX control in rjbdll.dll. The vulnerability is triggered when a user imports a specially crafted file into the media library and then deletes it, allowing remote code execution in the user’s ...

CVE-2007-5400

CVE-2007-5400 is a heap-based buffer overflow in RealNetworks RealPlayer 10.x (SWF frame handling) that can allow remote code execution via crafted SWF files. Connected advisories confirm a design/error in Shockwave Flash handling within RealPlayer’s SWF module, with multiple vendors issuing patc...

CVE-2008-3064

CVE-2008-3064 concerns an illegal resource reference vulnerability in RealNetworks RealPlayer ActiveX control. RealPlayer 10.x (and RealPlayer Enterprise) prior to build 6.0.12.1675 is affected. The underlying issue is an illegal resource reference that, when a user visits a crafted page with Rea...

CVE-2008-3064

Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a "Local resource reference vulnerability."...

RealNetworks RealPlayer SWF文件处理堆溢出漏洞

BUGTRAQ ID: 30370 CVECAN ID: CVE-2007-5400 RealPlayer是一款流行的多媒体播放器。 RealPlayer没有正确地处理Shockwave Flash（SWF）文件中的帧，如果用户受骗打开了恶意的SWF文件的话，就可以触发堆溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Build 6.0.12.1483 Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RealPlayer rjbdll.dll ActiveX控件Import方式栈溢出漏洞

BUGTRAQ ID: 30379 CVECAN ID: CVE-2008-3066 RealPlayer是一款流行的多媒体播放器。 RealPlayer的rjbdll.dll模块没有正确地删除媒体库文件，如果用户使用ActiveX控件FDC7A535-4070-4B92-A0EA-D9994BCC0DC5将有漏洞的文件导入到用户的媒体库的话，则在删除该文件时就会触发栈溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks -------------...