CVE-2007-6235: Improper Input Validation

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

RealPlayer RMOC3260.DLL ActiveX控件导入拒绝服务漏洞

RealPlayer是一款流行的媒体播放程序。 RealPlayer包含的RMO3260.DLL ActiveX控件处理存在边界条件错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于rmoc3260.ll中的GetSourceTransport函数中，构建恶意的文件，诱使用户打开，可导致应用程序崩溃。 Real Networks RealPlayer 11 目前没有解决方案提供： http://www.realnetworks.com/ 1，拷贝和粘贴如下代码到filepoc.wsf。 2，双击运行：...

CVE-2007-6224: Improper Input Validation

The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service browser crash via a certain argument to the GetSourceTransport method...

RealPlayer 11 Malformed AU File Denial of Service Exploit

No description provided by source. RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+ ...

realpdos_au.txt

Type : DOS attack when processing a malformed AU file. Affected : Realplayer 11 ActiveX on Win Vista and Win XP SP2 Date : 01-12-2007 Author : Adonis, Abed safehack.com Link : http://www.safehack.com/Advisory/realpdosau.txt Disclaimer ---------- The information in this text is believed to be true...

RealPlayer 11 Malformed AU File Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= RealPlayer 11 Malformed AU File Denial of Service Exploit ========================================================= RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka...

RealPlayer 11 - .au Denial of Service

RealPlayer 11 - .au Denial of Service RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+...

RealPlayer 11 - '.au' Denial of Service

RealPlayer 11 local/remote DoS by A.Sawan aka NtWaK0 and A.Hariri aka nophie import sys import os head = "\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"+ "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"+...

RealMedia RealPlayer Ierpplug.DLL PlayerProperty ActiveX Control Buffer Overflow Vulnerability

No description provided by source. !-- written by e.b. -- html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 999999 s=s+s; var obj = new ActiveXObject"IERPCTL.IERPCTL"; //FDC7A535-4070-4B92-A0EA-D9994BCC0DC5...

real-overflow.txt

There are multiple stack overflows in the ierpplug.dll ActiveX Control. These issues were originally discovered by shinnai, http://www.securityfocus.com/bid/22811 and http://www.securityfocus.com/bid/21802. I am adding the Import and PlayerProperty functions to the list. This was tested on Window...

richfx-overflow.txt

There are multiple stack overflows in the RichFX nprfxins.dll ActiveX Control. I almost positive that this control was installed with RealNetworks RealPlayer. This was tested on Windows XP SP2 fully patched and IE6. This control is marked safe for scripting. I have not tested code execution. PoC ...

RealMedia RealPlayer 10.511 - ierpplug.dll PlayerProperty ActiveX Control Buffer Overflow

RealMedia RealPlayer 10.511 - ierpplug.dll PlayerProperty ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/26586/info The RealPlayer ActiveX control is prone to a buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before...

RealPlayer 6.0.10 to 6.0.14 integer overflow analysis-vulnerability warning-the black bar safety net

This morning, the eggplant just tell me cnbeta is hanging horse, use the recent emergence of various loopholes. One of the more interesting is that one of the scripts in use have not seen the realplayer overflow. Horror! First from the realplayer directory rpplugins\ierpplug.dll in IIERPCtl. The...

RealMedia RealPlayer 10.5/11 - 'ierpplug.dll' PlayerProperty ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/26586/info The RealPlayer ActiveX control is prone to a buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. A remote attacker may exploit this...

RealPlayer ierpplug.dll ActiveX Exploit

No description provided by source. script language="javascript" eval"function RealExploit var user = navigator.userAgent.toLowerCase; ifuser.indexOf"msie 6"==-1&&user.indexOf"msie 7"==-1 return; ifuser.indexOf"nt 5."==-1 return; VulObject = "IER" + "PCtl.I" + "ERP" + "Ctl.1"; try...

RealNetworks RealPlayer Playlist Handling Buffer Overflow (CVE-2007-5601)

RealNetworks RealPlayer and RealOne Player are media player applications that are capable of playing back numerous multimedia file formats. A buffer overflow vulnerability has been reported in RealNetworks RealPlayer application. The vulnerability is due to an error in a RealPlayer ActiveX contro...

ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability

ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-062.html October 25, 2007 -- CVE ID: CVE-2007-4599 -- Affected Vendor: RealNetworks -- Affected Products: RealNetworks RealPlayer version 10.5 -- TippingPointTM IPS...

ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability

ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-061.html October 25, 2007 -- CVE ID: CVE-2007-2263 -- Affected Vendor: RealNetworks -- Affected Products: RealNetworks RealPlayer version 10.5 -- TippingPointT...

ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability

ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-063.html October 25, 2007 -- CVE ID: CVE-2007-2264 -- Affected Vendor: RealNetworks RealPlayer version 10.5 -- Affected Products: RealPlayer 6.x -- TippingPointTM IPS...

RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...