RealPlayer multiple vulnerabilities

Heap overflow on RealText format parsing. Heap overflow on AVI files parsing. Possibility to overwrite local files, ActiveX execution from MP3 file...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2005-1766

CVE-2005-1766 describes a heap-based buffer overflow in RealPlayer’s RealText parser (RealText/SMIL handling) that can be triggered by a specially crafted RealMedia file containing a long RealText string. Exploitation could allow remote code execution with the privileges of the logged-in user. Af...

CVE-2005-2052

CVE-2005-2052 describes a heap-based buffer overflow in vidplin.dll used by RealPlayer family (RealPlayer 8/Enterprise, RealPlayer 10/10.5, RealOne Player v1/v2). The flaw is triggered by processing an .avi file with a modified strf structure value, allowing remote attackers to attempt arbitrary ...

[VulnWatch] iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability

RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=250&type=vulnerabilities June 23, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc...

RealPlayer < 6.0.12.1212 vidplin.dll Crafted AVI Overflow

Binary data 3030.prm...

RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)

According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...

RHEL 3 / 4 : RealPlayer (RHSA-2005:523)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 05 Jul 2005 The previous package for Red Hat Enterprise Linux 4 did not contain the proper fix for this...

[VulnWatch] eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow

RealPlayer vidplin.dll AVI Processing Heap Overflow Release Date: June 23, 2005 Date Reported: May 4, 2005 Patch Development Time In Days: 36 Severity: High Code Execution Vendor: RealNetworks Systems Affected: For Microsoft Windows RealPlayer 10.5 6.0.12.1040-1069 RealPlayer 10 RealOne Player v2...

security flaw

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 05 Jul 2005 The previous package for Red Hat Enterprise Linux 4 did not contain the proper fix for this...

linux-realplayer -- RealText parsing heap overflow

An iDEFENSE Security Advisory reports: Remote exploitation of a heap-based buffer overflow vulnerability in the RealText file format parser within various versions of RealNetworks Inc.'s RealPlayer could allow attackers to execute arbitrary code...

CVE-2005-0455

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...

CVE-2005-0611

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...

GLSA-200504-21 : RealPlayer, Helix Player: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200504-21 RealPlayer, Helix Player: Buffer overflow vulnerability Piotr Bania has discovered a buffer overflow vulnerability in RealPlayer and Helix Player when processing malicious RAM files. Impact : By enticing a user to play a...

RealPlayer, Helix Player: Buffer overflow vulnerability

Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Helix Player is the Open Source version of RealPlayer. Description Piotr Bania has discovered a buffer overflow vulnerability in RealPlayer and Helix Player when processing malicious RAM files. Impa...

CVE-2005-0755

CVE-2005-0755 describes a heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player prior to 10.0.4, and RealOne Player v1/v2. The flaw allows remote attackers to execute arbitrary code by sending a long hostname in a RAM file, enabling code execution and potential control of the affe...

CVE-2005-0755

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file...

RHEL 4 : RealPlayer (RHSA-2005:363)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides solid media playback locally and via streaming. It plays RealAudio,...