SUSE-SA:2006:018: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2006:018 RealPlayer. This update fixes the following security problems in Realplayer: - Specially crafted SWF files could cause a buffer overflow and crash RealPlayer CVE-2006-0323. - Specially crafted web sites could cause heap overfl...

RealPlayer: Buffer overflow vulnerability

Background RealPlayer is a multimedia player capable of handling multiple multimedia file formats. Description RealPlayer is vulnerable to a buffer overflow when processing malicious SWF files. Impact By enticing a user to open a specially crafted SWF file an attacker could execute arbitrary code...

RealPlayer for Windows < Build 6.0.12.1483 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise on the remote Windows host suffers from one or more buffer overflows involving maliciously- crafted SWF and MBC files as well as web pages. In addition, it also may be affected by a local...

Rhapsody SWF File Handling Buffer Overflow

According to its version number, the installed version of Rhapsody on the remote host suffers from a buffer overflow involving SWF files. To exploit this issue, a remote attacker needs to convince a user to attempt to play a maliciously crafted SWF file using the affected application. C Tenable...

iDefense Security Advisory 03.23.06: RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnerability

RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnerability iDefense Security Advisory 03.23.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=404 March 23, 2006 I. BACKGROUND RealPlayer is an application for playing various media formats, develope...

Buffer overflow

Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast mbc file...

CVE-2006-1370

Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast mbc file...

CVE-2006-1370

CVE-2006-1370 describes a buffer overflow in RealNetworks RealPlayer products (RealPlayer 10.5, 6.0.x, RealPlayer 10/8/Enterprise, RealOne) triggered by a specially crafted Mimio boardCast (mbc) file. The underlying issue is improper handling/validation of MBC data, allowing a remote attacker to ...

CVE-2006-1370

Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast mbc file...

[SA19358] RealNetworks Products Multiple Buffer Overflow Vulnerabilities

TITLE: RealNetworks Products Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA19358 VERIFY ADVISORY: http://secunia.com/advisories/19358/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Rhapsody 3 http://secunia.com/product/5287/ RealPlayer Enterprise 1...

RealPlayer for Linux, Mac, and Windows Remote Overflows

Binary data 3485.prm...

CVE-2006-0323: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF Flash file with 1 a size value that is less than the actual size, or 2 other...

CVE-2006-1370: Undefined Security Weakness

Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast mbc file...

[Full-disclosure] SUSE Security Announcement: RealPlayer security problems &#40;SUSE-SA:2006:018&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: RealPlayer Announcement ID: SUSE-SA:2006:018 Date: Thu, 23 Mar 2006 12:00:00 +0000 Affected Products: Novell Linux Desktop 9 SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2 Vulnerability Type: remote code execution...

linux-realplayer -- heap overflow

iDefense Reports: Remote exploitation of a heap-based buffer overflow in RealNetwork Inc's RealPlayer could allow the execution of arbitrary code in the context of the currently logged in user. In order to exploit this vulnerability, an attacker would need to entice a user to follow a link to a...

linux-realplayer -- buffer overrun

Secunia Advisories Reports: A boundary error when processing SWF files can be exploited to cause a buffer overflow. This may allow execution of arbitrary code on the user's system...

CVE-2005-2922: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service crash and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes a buffer overflow bug is now available for Red Hat Enterprise Linux Extras 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides media playback locally and v...

CVE-2005-4126

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely...

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...