RealPlayer 9 *nix - Local Privilege Escalation

RealPlayer 9 nix - Local Privilege Escalation / rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the...

RealPlayer 9 *nix - Local Privilege Escalation

/ rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the files in there are group writeable. So long a...

RealPlayer 9 *nix Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ==================================================== RealPlayer 9 nix Local Privilege Escalation Exploit ==================================================== / rp9-priv-esc.c A local privilege escalation attack against the community supported...

CVE-2003-0141

CVE-2003-0141 involves RealOne Player 6.0.11.x and earlier and RealPlayer 8/RealPlayer Plus 8 6.0.9.584 (and related RealPlayer variants) where the PNG deflate algorithm can trigger heap corruption by processing a PNG containing compressed data using fixed trees with length values 286–287, treate...

RealPlayer PNG Deflate Algorithm Heap Corruption Arbitrary Code Execution

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows has a flaw in the remote version that may allow an attacker to execute arbitrary code on the remote host, with the privileges of the user running RealPlayer. To do so, an attack...

CVE-2002-1321

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via 1 a Synchronized Multimedia Integration Language SMIL file with a long parameter, 2 a long long filename in a rtsp:// request, e.g. from a .m3u file, or 3 certain "Now Playing" options on a...

CVE-2002-1321

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via 1 a Synchronized Multimedia Integration Language SMIL file with a long parameter, 2 a long long filename in a rtsp:// request, e.g. from a .m3u file, or 3 certain "Now Playing" options on a...

CVE-2002-1321

The CVE-2002-1321 entry concerns RealNetworks products RealOne and RealPlayer, where multiple buffer overflows can allow remote code execution. The root causes are: (1) a SMIL file with an excessively long parameter, (2) a long filename in an rtsp:// request (e.g., from a .m3u file), and (3) cert...

Mulitple Buffer Overflow conditions in RealPlayer/RealOne (#NISR22112002)

NGSSoftware Insight Security Research Advisory Name: Multiple Buffer Overruns RealOne / RealPlayer / RealOne Enterprise Desktop Systems Affected: Windows All Severity: Critical Category: Remote Buffer Overrun Vendor URL: http://www.real.com/ Author: Mark Litchfield [email protected] Date: 22nd...

RealPlayer/RealOne buffer overflows

Buffer overflows during URL and files processing...

CVE-2002-0415

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...

CVE-2002-0207

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header...

CVE-2002-0337

RealPlayer 8 allows remote attackers to cause a denial of service CPU utilization via malformed .mp3 files...

CVE-2002-0207

RealNetworks RealPlayer 8.0 and earlier are affected by a buffer overflow caused by a header length value that exceeds the actual header length. This is a remote code execution risk with a network attack vector (no authentication required; low complexity). The description indicates the vulnerabil...

CVE-2002-0415

The CVE-2002-0415 entry describes a directory traversal vulnerability in the web server used by RealPlayer 6.0.7 (and possibly other versions). The vulnerability allows local users to read files accessible to RealPlayer by using a .. (dot dot) sequence in an HTTP GET request to port 1275. The pro...

CVE-2002-0415

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...

CVE-2002-0207

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header...

CVE-2002-0337

The CVE-2002-0337 entry concerns RealPlayer 8 and a denial-of-service condition triggered by processing malformed MP3 files. The vulnerability allows a remote attacker to induce high CPU usage, leading to service disruption. Affected software is RealPlayer 8; the exact component/file and root cau...

CVE-2002-0337

RealPlayer 8 allows remote attackers to cause a denial of service CPU utilization via malformed .mp3 files...

2K, with RealPlayer Installed 100 % CPU utilization

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 0 10 20 30 40 50 60 70 80 90 100 |----|----|----|----|----|----|----|----|----|----| ................................................... .---------------. / NtWaK0 Advisory +-----------------------------------------------------------------------. :...