This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
APP:REAL:REAL-MPG-WIDTH
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
APP
|
Keywords |
RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption
|
Release Date |
2012/01/05
|
Update Number |
2059
|
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
APP: RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption
This signature detects attempts to exploit a known flaw in RealNetworks RealPlayer. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted MPEG file. Successful exploitation can lead to the injection and execution of arbitrary code in the context of the currently logged in user.
Extended Description
Real Networks RealPlayer is prone to multiple security vulnerabilities.
Real Networks released an advisory regarding 19 security vulnerabilities in RealPlayer.
Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Other attacks may also be possible.
The following versions are affected:
RealPlayer 11.0 to 11.1
RealPlayer SP 1.0 to 1.1.5
RealPlayer 14.0.0 to 14.0.7
Mac RealPlayer 12.0.0.1701
Affected Products
- Real_networks mac_realplayer 12.0.0.1701
- Real_networks realplayer 11
- Real_networks realplayer 11.0.1
- Real_networks realplayer 11.0.2
- Real_networks realplayer 11.0.2.1744
- Real_networks realplayer 11.0.2.2315
- Real_networks realplayer 11.0.3
- Real_networks realplayer 11.0.4
- Real_networks realplayer 11.0.5
- Real_networks realplayer 11.1
- Real_networks realplayer 11 Beta
- Real_networks realplayer 11 Build 6.0.14.748
- Real_networks realplayer 14.0.0
- Real_networks realplayer 14.0.1
- Real_networks realplayer 14.0.1.609
- Real_networks realplayer 14.0.1.633
- Real_networks realplayer 14.0.2
- Real_networks realplayer 14.0.2.633
- Real_networks realplayer 14.0.3
- Real_networks realplayer 14.0.5
- Real_networks realplayer 14.0.6
- Real_networks realplayer 14.0.7
- Real_networks realplayer_11_beta 6.0.14.550
- Real_networks realplayer_enterprise 1.1.0
- Real_networks realplayer_enterprise 1.2.0
- Real_networks realplayer_enterprise 1.5.0
- Real_networks realplayer_enterprise 1.6.0
- Real_networks realplayer_enterprise 1.7.0
- Real_networks realplayer_enterprise 2.0
- Real_networks realplayer_enterprise 2.1.2
- Real_networks realplayer_enterprise 2.1.3
- Real_networks realplayer_enterprise 2.1.4
- Real_networks realplayer_enterprise 2.1.5
- Real_networks realplayer_enterprise 2.1.6
- Real_networks realplayer_enterprise
- Real_networks realplayer_sp 1.0.0
- Real_networks realplayer_sp 1.0.1
- Real_networks realplayer_sp 1.0.2
- Real_networks realplayer_sp 1.0.5
- Real_networks realplayer_sp 1.1
- Real_networks realplayer_sp 1.1.1
- Real_networks realplayer_sp 1.1.2
- Real_networks realplayer_sp 1.1.3
- Real_networks realplayer_sp 1.1.4
- Real_networks realplayer_sp 1.1.5
- Real_networks realplayer_sp
References