CVE-2013-1750

RealNetworks RealPlayer is affected by a heap-based buffer overflow (CVE-2013-1750) that allows remote code execution when processing a malformed MP4 file. The vulnerable products listed include RealPlayer prior to version 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5. The root cause is a heap-ba...

Real Networks RealPlayer堆缓冲区溢出漏洞(CVE-2013-1750)

BUGTRAQ ID: 58539 CVECAN ID: CVE-2013-1750 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealPlayer在处理MP4文件时存在错误，可被利用造成堆缓冲区溢出。成功利用后可允许执行任意代码。 0 RealPlayer 15.x 厂商补丁： Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://service.real.com/realplayer/security/...

PT-2013-3376

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 16.0.1.18 RealPlayer SP versions 1.0 through 1.1.5 Description The issue is related to a heap-based buffer overflow that can be triggered by a malformed MP4 file, allowing remote attackers to execute arbitrary code...

CVE-2013-1750: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4 file...

RealPlayer for Windows < 16.0.1.18 MP4 Heap-Based Buffer Overflow

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 16.0.1.18. It is, therefore, affected by a heap-based buffer overflow vulnerability related to handling malformed MP4 files that could lead to arbitrary code execution. C Tenable Network...

RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)

A stack buffer overflow vulnerability exists in RealNetworks RealPlayer. Successful exploitation can result in arbitrary code execution in the context of the currently logged in user...

RealPlayer 16.0.0.282 (.html) Memory Corruption

Exploit for windows platform in category dos / poc Title : RealPlayer 16.0.0.282 .html Memory Corruption Date: 2013-02-18 Softwares Link: http://fr.real.com/realplayer/ phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home: www.arab47.com Greeting To : 3xp1r3 Cyber Army...

RHEL 3 / 4 : RealPlayer (RHSA-2005:762)

An updated RealPlayer package that fixes a format string bug is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides media playback locally and via streaming. A format string bug was discover...

RHEL 3 / 4 : RealPlayer (RHSA-2006:0257)

An updated RealPlayer package that fixes a buffer overflow bug is now available for Red Hat Enterprise Linux Extras 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides media playback locally and v...

RealPlayer InternetShortcut URL property buffer overflow

Added: 01/07/2013 CVE: CVE-2012-5691 BID: 56956 OSVDB: 88486 Background RealPlayer is a media player application which can play back various multimedia file formats. Problem A buffer overflow vulnerability in the GetPrivateProfileString function allows command execution when a user opens a...

RealPlayer InternetShortcut URL property buffer overflow

Added: 01/07/2013 CVE: CVE-2012-5691 BID: 56956 OSVDB: 88486 Background RealPlayer is a media player application which can play back various multimedia file formats. Problem A buffer overflow vulnerability in the GetPrivateProfileString function allows command execution when a user opens a...

RealPlayer InternetShortcut URL property buffer overflow

Added: 01/07/2013 CVE: CVE-2012-5691 BID: 56956 OSVDB: 88486 Background RealPlayer is a media player application which can play back various multimedia file formats. Problem A buffer overflow vulnerability in the GetPrivateProfileString function allows command execution when a user opens a...

RealPlayer InternetShortcut URL property buffer overflow

Added: 01/07/2013 CVE: CVE-2012-5691 BID: 56956 OSVDB: 88486 Background RealPlayer is a media player application which can play back various multimedia file formats. Problem A buffer overflow vulnerability in the GetPrivateProfileString function allows command execution when a user opens a...

Real Networks RealPlayer < 16.0.0.282 Multiple Vulnerabilities

Binary data 6652.prm...

RealPlayer RealMedia File Handling Buffer Overflow

This Metasploit module exploits a stack based buffer overflow on RealPlayer versions 15.0.6.14 and below. The vulnerability exists in the handling of real media files, due to the insecure usage of the GetPrivateProfileString function to retrieve the URL property from an InternetShortcut section...

RealPlayer RealMedia File Handling Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'RealPlayer...

RealPlayer - '.RealMedia' File Handling Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'RealPlayer...

RealNetworks RealPlayer Code Execution Vulnerabilities - Dec12 (Windows)

This host is installed with RealPlayer which is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayercodeexecvulndec12win.nasl 5988 2017-04-20 09:02:29Z teissa $ RealNetworks RealPlayer Code Execution Vulnerabilities - Dec12 Windows Authors: Rachana Shetty...

RealNetworks RealPlayer Code Execution Vulnerabilities (Dec 2012) - Windows

RealPlayer is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer ATRAC Sample Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when the...