EUVD-2010-3727

Malware in sbrugna...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3748

CVE-2010-3748 covers a stack-based buffer overflow in RealNetworks RealPlayer’s RichFX component. Affected products include RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The core issue is a RichFX overflow that could allow remote code execution; Microsoft MSVR ad...

RichFX Basic Player ActiveX控件多个缓冲区溢出漏洞

RichFX Basic Player是一款基于浏览器的媒体播放插件。 RichFX Basic Player包含的控件不正确过滤参数数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是控件对DoInstall，QueryComponents方法的参数缺少充分边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序进程权限执行任意指令。 RichFX RichFX Basic Player 1.1 + Real Networks RealPlayer 11 + Real Networks RealPlayer 11 Beta 6.0.14 550 目前没有解决方案提供：...

richfx-overflow.txt

There are multiple stack overflows in the RichFX nprfxins.dll ActiveX Control. I almost positive that this control was installed with RealNetworks RealPlayer. This was tested on Windows XP SP2 fully patched and IE6. This control is marked safe for scripting. I have not tested code execution. PoC ...

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26573/info RichFX Basic Player ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute...

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26573/info RichFX Basic Player ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied...