CVE-2005-2055

Affected software : RealPlayer 8, RealPlayer 10, RealPlayer 10.5 (6.0.12.1040–1069), and RealPlayer Enterprise/RealOne Player v1 and v2. Issue : A vulnerability in how RealPlayer handles clip-encoded URLs could allow a remote attacker hosting a malicious web server to cause the player to generate...

CVE-2005-2054

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-2055

RealPlayer 8, 10, 10.5 6.0.12.1040-1069, and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers"...

High Risk Vulnerability in RealPlayer for Windows

John Heasman of NGSSoftware has discovered a high risk vulnerability in RealPlayer for Windows. Versions affected include: RealPlayer 10.5 6.0.12.1040-1069 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 10.5 6.0.12.1212 is NOT affected. The flaw permits the overwriting of a local fi...

RealPlayer multiple vulnerabilities

Heap overflow on RealText format parsing. Heap overflow on AVI files parsing. Possibility to overwrite local files, ActiveX execution from MP3 file...

CVE-2005-2055: Undefined Security Weakness

RealPlayer 8, 10, 10.5 6.0.12.1040-1069, and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers"...

CVE-2005-2054: Undefined Security Weakness

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

CVE-2005-2052

CVE-2005-2052 describes a heap-based buffer overflow in vidplin.dll used by RealPlayer family (RealPlayer 8/Enterprise, RealPlayer 10/10.5, RealOne Player v1/v2). The flaw is triggered by processing an .avi file with a modified strf structure value, allowing remote attackers to attempt arbitrary ...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

CVE-2005-1766

CVE-2005-1766 describes a heap-based buffer overflow in RealPlayer’s RealText parser (RealText/SMIL handling) that can be triggered by a specially crafted RealMedia file containing a long RealText string. Exploitation could allow remote code execution with the privileges of the logged-in user. Af...

CVE-2005-2052: Undefined Security Weakness

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-1766: Undefined Security Weakness

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file...

RealPlayer < 6.0.12.1212 vidplin.dll Crafted AVI Overflow

Binary data 3030.prm...

RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)

According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...

[VulnWatch] iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability

RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=250&type=vulnerabilities June 23, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc...