CVE-2009-4245

CVE-2009-4245 is a heap-based buffer overflow in RealNetworks RealPlayer/HelixPlayer GIF processing (gifcodec.cpp/gifimage.cpp). Affected products include RealPlayer 10, 10.5 (6.0.12.1040–1741), RealPlayer 11 (11.0.0–11.0.4), RealPlayer Enterprise, Mac/Linux RealPlayer 10/10.1, and Helix Player 1...

CVE-2009-4257

CVE-2009-4257 is a heap-based buffer overflow in SMIL handling within HelixPlayer/RealPlayer (smlrender.dll/smlpkt.cpp) that could allow remote code execution when processing crafted SMIL data. Public advisories (Red Hat RHSA-2010-0094, CentOS/SuSE/Oracle Linux updates, OpenVAS/NASL entries) docu...

CVE-2009-4242

CVE-2009-4242 is a heap-based buffer overflow in the GIF handling path of HelixPlayer/RealPlayer (GIF codec) that can be triggered by a crafted GIF file. Public docs corroborate that multiple GIF-related heap/overflow flaws affected HelixPlayer/RealPlayer and could allow remote code execution (no...

CVE-2009-4243

RealPlayer/Helix vulnerability CVE-2009-4243 stems from an integer/heap overflow in the handling of HTTP chunked transfer encoded media. Affects RealPlayer 10–11 (Windows, Mac, Linux) and Helix Player 10.x. Remote code execution could be possible as described by multiple advisories; exploitation ...

CVE-2007-3410

CVE-2007-3410 describes a stack-based buffer overflow in RealPlayer/HelixPlayer when parsing SMIL wallclock values in SmilTimeValue::parseWallClockValue. This allows remote attackers to execute arbitrary code by feeding a crafted SMIL file with a long wallclock value. The issue affects RealPlayer...

CVE-2009-4248

CVE-2009-4248 describes a buffer overflow in RealPlayer/HelixPlayer’s RTSP SET_PARAMETER handling (RTSPProtocol::HandleSetParameterRequest). A crafted RTSP SET_PARAMETER request could crash the application or potentially allow arbitrary code execution. Affected products include RealPlayer 10/10.5...

CVE-2007-2263

CVE-2007-2263 describes a heap-based buffer overflow in RealNetworks RealPlayer/RealOne/HelixPlayer when processing SWF files with malformed record headers, allowing remote code execution. The underlying flaw is in how RealPlayer’s SWF parsing handles header records, enabling an attacker to craft...

CVE-2009-4246

CVE-2009-4246 is a RealPlayer/Helix vulnerability: a stack-based buffer overflow in RealPlayer 10/10.5, RealPlayer 11, RealPlayer Enterprise, Mac/Linux RealPlayer 10/10.1, and Helix Player 10.x could allow user-assisted remote code execution via a malformed .RJS skin file containing a crafted web...

CVE-2007-5080

CVE-2007-5080 : Multiple RealNetworks RealPlayer family components (RealPlayer 10/10.5, RealOne Player 1, RealPlayer Enterprise) on Windows are affected by a heap-based buffer overflow triggered while processing Lyrics3 2.00 tags in MP3 files. The vulnerability would allow a remote attacker to ex...

CVE-2007-2264

The CVE-2007-2264 issue is a heap overflow in RealNetworks RealPlayer/RealOne/HelixPlayer when processing RA/RAM headers with an overly large size field. Affected products include RealPlayer 8, 10, 10.1 (and possibly 10.5), RealOne Player 1 and 2, and RealPlayer Enterprise. The underlying cause i...

CVE-2009-4241

CVE-2009-4241 is a RealNetworks RealPlayer/Helix Player heap-based buffer overflow vulnerability. The entry specifies a remote code execution risk via a crafted file with invalid ASMRuleBook structures causing heap memory corruption in RealPlayer 10, 10.5 (6.0.12.1040–6.0.12.1741), RealPlayer 11 ...

CVE-2009-4247

CVE-2009-4247 is a real vulnerability in HelixPlayer/RealPlayer where a stack-based buffer/RuleBook overflow in the RTSP/RuleBook handling could crash the player or allow arbitrary code execution. Affected products span RealPlayer 10 and 10.5, RealPlayer 11, RealPlayer SP, RealPlayer Enterprise, ...

CVE-2007-5081

CVE-2007-5081 is a remote-code-execution heap overflow in RealNetworks RealPlayer/RealOne and RealPlayer Enterprise, triggered by crafted RM files. Affected: RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; RealPlayer Enterprise. Root cause: boundary/size handling in RM processi...

CVE-2009-4244

RealNetworks RealPlayer vulnerability (CVE-2009-4244) is a heap-based buffer overflow in RealPlayer 10, RealPlayer 10.5 (6.0.12.1040–6.0.12.1741), RealPlayer 11 (11.0.0–11.0.4), RealPlayer Enterprise, Mac RealPlayer 10/10.1/11.0, Linux RealPlayer 10, and Helix Player 10.x. The flaw arises from an...