Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Windows >> RealPlayer for Windows Multiple Vulnerabilities (2)


Vulnerability Assessment Details

RealPlayer for Windows Multiple Vulnerabilities (2)

Vulnerability Assessment Summary
Checks for multiple vulnerabilities in RealPlayer for Windows (2)

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote Windows application is affected by several overflow
vulnerabilities.

Description :

According to its version number, the installed version of RealPlayer /
RealOne Player / RealPlayer Enterprise for Windows on the remote host
is prone to buffer overflow and heap overflow vulnerabilities. An
attacker may be able to leverage these issues to execute arbitrary
code on the remote host subject to the permissions of the user running
the affected application. Note that a user doesn't necessarily need
to explicitly access a malicious media file since the browser may
automatically pass to the application RealPlayer skin files (ie, files
with the extension '.rjs').

See also :

http://research.eeye.com/html/advisories/published/AD20051110a.html
http://research.eeye.com/html/advisories/published/AD20051110b.html
http://www.securityfocus.com/archive/1/416475
http://service.real.com/help/faq/security/security111005.html
http://service.real.com/help/faq/security/051110_player/EN/

Solution :

Upgrade according to the vendor advisories referenced above.

Network Security Threat Level:

High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)

Networks Security ID: 15381, 15382, 15383, 15398

Vulnerability Assessment Copyright: This script is Copyright (C) 2005-2006 Tenable Network Security

Cables, Connectors


Dell PowerEdge R640 Server 2x Gold 6150 2.70Ghz 36-Core 256GB 2x 960GB SSD H730P picture

Dell PowerEdge R640 Server 2x Gold 6150 2.70Ghz 36-Core 256GB 2x 960GB SSD H730P

$1737.25



Dell R740XD 24SFF+4SFF 2.8Ghz 56-C 256GB H740P 10G SFP+ NIC 2x1100W 12x Trays picture

Dell R740XD 24SFF+4SFF 2.8Ghz 56-C 256GB H740P 10G SFP+ NIC 2x1100W 12x Trays

$4704.08



Dell PowerEdge R740xd Server 2x Gold 6140 2.30Ghz 36-Core 512GB H330 picture

Dell PowerEdge R740xd Server 2x Gold 6140 2.30Ghz 36-Core 512GB H330

$2194.80



Dell R740XD 24SFF 12 NVMe 2.1Ghz 32-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails picture

Dell R740XD 24SFF 12 NVMe 2.1Ghz 32-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails

$3932.07



INTEL XEON GOLD 6148 20 Core SR3B6 2.4GHZ 27.5MB Processor    @24 picture

INTEL XEON GOLD 6148 20 Core SR3B6 2.4GHZ 27.5MB Processor @24

$99.99



Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5 picture

Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5

$46.00



Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION picture

Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION

$12.00



Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU picture

Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU

$39.99



HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA picture

HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA

$243.59



Dell Precision 5810 Tower Intel Xeon E5-1603v3 2.8GHz 8GB RAM 500GB HDD W10P GPU picture

Dell Precision 5810 Tower Intel Xeon E5-1603v3 2.8GHz 8GB RAM 500GB HDD W10P GPU

$129.99



Discussions

No Discussions have been posted on this vulnerability.