1791 matches found
security flaw
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...
Critical: Red Hat Security Advisory: RealPlayer security update
An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...
security flaw
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...
[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability
Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...
CVE-2005-0455
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...
CVE-2005-0611
RealNetworks RealPlayer/RealOne Player WAV parsing (LIST chunk) suffers a heap-based buffer overflow that can allow remote code execution via crafted WAV files. Affected: RealPlayer 10.5 (6.0.12.1056 and earlier), RealPlayer 10, 8, RealOne Player V2/V1. Some connected advisories note exploitation...
CVE-2005-0455
CVE-2005-0455 is a stack-based buffer overflow in RealPlayer/RealOne SMIL parsing (CSmil1Parser::testAttributeFailed in smlparse.cpp) triggered by crafted SMIL files with large system-screen-size values. Affects RealPlayer 10.5 (6.0.12.1056 and earlier), RealPlayer 10/8, and RealOne Player V1/V2....
CVE-2005-0611
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...
CVE-2005-0611: Undefined Security Weakness
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files...
CVE-2005-0455: Undefined Security Weakness
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...
RealPlayer < 6.0.12.1059 Multiple Remote Overflows
Binary data 2666.prm...
iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability
RealNetworks RealPlayer .smil Buffer Overflow Vulnerability iDEFENSE Security Advisory 03.01.05 www.idefense.com/application/poi/display?id=209&type=vulnerabilities March 1, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc. For more...
RealPlayer Multiple Remote Overflows (2005-03-01)
According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows might allow an attacker to execute arbitrary code and delete arbitrary files on the remote host. To exploit these flaws, an attacker would send a malformed SMIL or WAV file to a...
realplayer -- remote heap overflow
Two exploits have been identified in the Linux RealPlayer client. RealNetworks states: RealNetworks, Inc. has addressed recently discovered security vulnerabilities that offered the potential for an attacker to run arbitrary or malicious code on a customer's machine. RealNetworks has received no...
CVE-2004-1481
The CVE-2004-1481 entry describes a heap-based buffer overflow in RealNetworks RealPlayer 8–10.5 (6.0.12.1040) and RealOne Player 1–2 on Windows or macOS, caused by an integer/length field overflow in pnen3260.dll when processing SMIL/.rm files with a very large length value for the data chunk. T...
CVE-2004-1481
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 6.0.12.1040 and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based...
CVE-2004-1481: Undefined Security Weakness
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 6.0.12.1040 and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based...
CVE-2005-0191
CVE-2005-0191 describes an off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier . The vulnerability could allow a remote attacker to execute arbitrary code via a long tag, indicating a network-exposed vector. Connec...
CVE-2005-0192
CVE-2005-0192 : Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier, in parsing of RealPlayer Skin filenames, allows remote attackers to read arbitrary files via a .. in an RJS filename. Affected product: RealPlayer/RealPlayer for Windows (RealPlayer 10.5 and earlier). ...