[VulnWatch] Multiple vulnerabilities in RealPlayer (#NISR11062004)

NGSSoftware Insight Security Research Advisory Name: REAL One Player code execution through malformed media file Systems Affected: RealOne Player English, RealOne Player v2 all languages, RealPlayer 10 English, German and Japanese, RealPlayer 8 all languages, RealPlayer Enterprise all versions,...

[Full-Disclosure] iDEFENSE Security Advisory 06.10.04: Real Networks RealPlayer URL Parsing Buffer Overflow Vulnerability

Real Networks RealPlayer URL Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.10.04 www.idefense.com/application/poi/display?id=109&type=vulnerabilities June 10, 2004 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc. Fo...

EEYE: RealPlayer embd3260.dll Error Response Heap Overflow

RealPlayer embd3260.dll Error Response Heap Overflow Release Date: June 10, 2004 Date Reported: May 14, 2004 Severity: High Remote Code Execution Vendor: RealNetworks Systems Affected: RealOne Player RealOne Player v2 RealPlayer 10 RealPlayer 8 RealPlayer Enterprise Description: eEye Digital...

CVE-2004-0387

Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file...

CVE-2004-0387

The CVE-2004-0387 issue is a stack-based buffer overflow in the RT3 plugin used by RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allowing remote code execution via malformed .R3T files. Affected components: RT3 plugin within RealPlayer/RealOne Player family....

CVE-2004-0387

Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file...

CVE-2004-0387: Undefined Security Weakness

Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file...

CVE-2004-0258

CVE-2004-0258 affects RealNetworks RealPlayer family (RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, RealPlayer Enterprise). The issue is multiple buffer overflows caused by improper handling of certain metafiles and streaming-image files, allowing remote attackers to execute arb...

CVE-2004-0258

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed 1 .RP, 2 .RT, 3 .RAM, 4 .RPM or 5 .SMIL files...

CVE-2004-0258: Undefined Security Weakness

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed 1 .RP, 2 .RT, 3 .RAM, 4 .RPM or 5 .SMIL files...

Directory traversal in RealPlayer allows code execution

OVERVIEW ======== RealPlayer is a popular multimedia player developed by RealNetworks. One of its features are RMP files, RealJukebox Metadata Packages. These are XML formatted files which may contain e.g. playlists, references to skin files .rjs, and information about related web pages. A...

Multiple RealPlayer/RealOne buffer overflows

Buffer overflows on parsing different file types...

Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer

NGSSoftware Insight Security Research Advisory Name: RealPlayer & RealOne Player Buffer Overruns Systems Affected: RealOne Player, RealOne Player v2, RealOne Enterprise Desktop / RealPlayer Enterprise all language versions, all platforms Severity: High Risk Vendor URL: http://www.real.com/ Author...

RealPlayer File Handler Arbitrary Code Execution

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise has a flaw that may allow an attacker to execute arbitrary code on the remote host, with the privileges of the user running RealPlayer, using specially crafted RP, RT, RAM, RPM or SMIL file...

RealPlayer 9 *nix Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ==================================================== RealPlayer 9 nix Local Privilege Escalation Exploit ==================================================== / rp9-priv-esc.c A local privilege escalation attack against the community supported...

RealPlayer 9 *nix - Local Privilege Escalation

RealPlayer 9 nix - Local Privilege Escalation / rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the...

RealPlayer 9 *nix - Local Privilege Escalation

/ rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the files in there are group writeable. So long a...

CVE-2003-0141

CVE-2003-0141 involves RealOne Player 6.0.11.x and earlier and RealPlayer 8/RealPlayer Plus 8 6.0.9.584 (and related RealPlayer variants) where the PNG deflate algorithm can trigger heap corruption by processing a PNG containing compressed data using fixed trees with length values 286–287, treate...

CVE-2003-0141: Undefined Security Weakness

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the...

RealPlayer PNG Deflate Algorithm Heap Corruption Arbitrary Code Execution

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows has a flaw in the remote version that may allow an attacker to execute arbitrary code on the remote host, with the privileges of the user running RealPlayer. To do so, an attack...