CVE-2010-3750

This CVE (CVE-2010-3750) affects RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The issue is a heap-buffer interaction flaw in rjrmrpln.dll where file contents are not properly validated during parsing of Name Value Property (NVP) elements in logical ...

CVE-2010-3748

CVE-2010-3748 covers a stack-based buffer overflow in RealNetworks RealPlayer’s RichFX component. Affected products include RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The core issue is a RichFX overflow that could allow remote code execution; Microsoft MSVR ad...

CVE-2010-2578

CVE-2010-2578 is a heap-based buffer overflow in RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2 that can be exploited by a crafted QCP file to cause an unspecified impact. Multiple connected sources corroborate the vulnerability, including CVE records ...

CVE-2010-2998

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...

CVE-2010-3747

An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2010-3751

CVE-2010-3751 concerns multiple heap-based buffer overflows in the RealPlayer ActiveX control. The vulnerability arises when processing a long ".smil" argument in the tfile, pnmm, or cdda protocol handlers, allowing remote attackers to execute arbitrary code. Affected software includes RealPlayer...

CVE-2010-3749

The CVE-2010-3749 flaw affects RealNetworks RealPlayer 11.0–11.1 and RealPlayer SP 1.0–1.1, in the browser-plugin/ActiveX implementation for the RecordClip method. A specific argument containing a double-quote enables parameter injection that allows remote code execution: an attacker can craft a ...

RealNetworks Releases Security Update for RealPlayer Vulnerabilities

RealNetworks has issued a Security Update to address multiple vulnerabilities affecting RealPlayer. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the RealNetworks security advisory and apply any necessa...

RealNetworks RealPlayer RJMDSections Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required in that a target must open a malicious website or media file. The specific flaw exists within the code responsible for parsing Name Value...

RealNetworks RealPlayer Malformed IVR Pointer Index Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when parsing a RealMed...

RealNetworks RealPlayer Multiple Protocol Handlers Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the RealPlayer ActiveX control...

RealNetworks Realplayer RecordClip Parameter Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the browser plugins provided by...

RealNetworks RealPlayer RAM File Processing Buffer Overflow (CVE-2005-0755)

There is a heap buffer overflow vulnerability in the way that RealPlayer and RealOne Player handle input data. There are certain RealAudio specific text-based file types namely .RMP, .RAM, .SMIL, .RT, .RP that are used to facilitate the loading of RealAudio media files. A vulnerability exists in...

RealNetworks RealPlayer Buffer Overflow (CVE-2004-0258)

RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. There exists a buffer overflow vulnerability in...

Month Of Abysssec Undisclosed Bugs - RealPlayer

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue flv.writeflvBody2 flv.close print '- FLV file...

RealNetworks RealPlayer FLV Parsing Multiple Integer Overflows (CVE-2010-3000)

RealPlayer is a media player application developed by RealNetworks Inc. This application is capable of playing back numerous multimedia file formats and can open media files from local file system or network servers. RealPlayer has an extensible nature that allows it to handle different media fil...

RealPlayer - FLV Parsing Integer Overflow

RealPlayer - FLV Parsing Integer Overflow ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue...

RealPlayer FLV Parsing Integer Overflow

Exploit for windows platform in category dos / poc ======================================= RealPlayer FLV Parsing Integer Overflow ======================================= ======================================= RealPlayer FLV Parsing Integer Overflow ======================================= Title ...

RealPlayer - FLV Parsing Integer Overflow

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue flv.writeflvBody2 flv.close print '- FLV file...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealnetwoksrealplayermultvulnwin.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2010...