From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Apr 07 2004 - 08:42:07 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
RealPlayer/RealOne R3T File Handling Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA11314

VERIFY ADVISORY:
http://secunia.com/advisories/11314/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
From remote

SOFTWARE:
RealPlayer Enterprise
RealOne Player v1
RealOne Player v2
RealPlayer 10
RealPlayer 8

DESCRIPTION:
NGSSoftware has discovered a vulnerability in RealOne Player /
RealPlayer, which can be exploited by malicious people to compromise
a user's system.

The vulnerability is caused due to an unspecified boundary error
within the handling of the R3T file format. This can be exploited to
cause a buffer overflow via a specially crafted ".R3T" file.

Successful exploitation allows execution of arbitrary code on a
user's system but requires that the user has installed the R3T
plug-in and can be tricked into opening the file (e.g. by visiting a
malicious website).

SOLUTION:
Updates are available and can be applied via the "Check for Update"
feature or manually (see vendor advisory).

PROVIDED AND/OR DISCOVERED BY:
Mark Litchfield, NGSSoftware.

ORIGINAL ADVISORY:
RealNetworks:
http://www.service.real.com/help/faq/security/040406_r3t/en/

NGSSoftware:
http://www.nextgenss.com/advisories/realr3t.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]