EUVD-2010-3727

Malware in sbrugna...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3748

CVE-2010-3748 covers a stack-based buffer overflow in RealNetworks RealPlayer’s RichFX component. Affected products include RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The core issue is a RichFX overflow that could allow remote code execution; Microsoft MSVR ad...

CVE-2010-3748: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via unknown vectors...

RichFX Basic Player ActiveX控件多个缓冲区溢出漏洞

RichFX Basic Player是一款基于浏览器的媒体播放插件。 RichFX Basic Player包含的控件不正确过滤参数数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是控件对DoInstall，QueryComponents方法的参数缺少充分边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序进程权限执行任意指令。 RichFX RichFX Basic Player 1.1 + Real Networks RealPlayer 11 + Real Networks RealPlayer 11 Beta 6.0.14 550 目前没有解决方案提供：...

richfx-overflow.txt

There are multiple stack overflows in the RichFX nprfxins.dll ActiveX Control. I almost positive that this control was installed with RealNetworks RealPlayer. This was tested on Windows XP SP2 fully patched and IE6. This control is marked safe for scripting. I have not tested code execution. PoC ...

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26573/info RichFX Basic Player ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied...

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26573/info RichFX Basic Player ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute...