628 matches found
RealNetworks RealOne Player/RealPlayer - '.RM' Local Stack Buffer Overflow
/ source: https://www.securityfocus.com/bid/15381/info RealNetworks RealPlayer and RealOne Player are reported prone to a remote stack-based buffer-overflow vulnerability. The applications fail to perform boundary checks when parsing RM Real Media files. A remote attacker may execute arbitrary co...
security flaw
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...
CVE-2002-2116
The provided documents describe CVE-2002-2116 affecting Netgear RM-356 and RT-338 series SOHO routers. The vulnerability is a remote denial of service triggered by a UDP port scan, demonstrated via nmap. Affected components are related to the router’s handling of UDP traffic, with the root cause ...
CVE-2002-2116: Undefined Security Weakness
Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service crash via a UDP port scan, as demonstrated using nmap...
CVE-2005-2055
RealPlayer 8, 10, 10.5 6.0.12.1040-1069, and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers"...
CVE-2005-2055: Undefined Security Weakness
RealPlayer 8, 10, 10.5 6.0.12.1040-1069, and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers"...
RM SafetyNet Plus snpfiltered.pl u Parameter XSS
The remote host is running SafetyNet Plus, an educational web filtering application. This version is vulnerable to a cross-site scripting attack. Input to the 'u' parameter of snpfiltered.pl is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a...
