RealNetworks RealPlayer and RealOne Player R3T buffer overflow
| realplayer-r3t-bo (15774) |  High Risk |
Description:
Multiple RealPlayer and RealOne Player products are vulnerable to a stack-based buffer overflow when processing R3T media files. If the R3Tplug-in is installed, a remote attacker could send a malicious R3T file in a specially-crafted Web page or in a malicious HTML email, to overflow a buffer and execute arbitrary code on the victim's system once the Web page is viewed or or the email is opened.
Platforms Affected:
- Real, RealONE Player 1 Beta
- Real, RealONE Player
- Real, RealONE Player Enterprise
- Real, RealPlayer 8.0 Win32
- Real, RealPlayer 8.0 Unix
- Real, RealPlayer 8.0 Mac OS
- RedHat, RHEL Extras 3
Remedy:
Install the appropriate update for your system, as listed in the RealNetworks, Inc. Releases Update dated April 6th, 2004. See References.
Consequences:
Gain Access
References:
- NGSSoftware Insight Security Research Advisory #NISR17042004 , REAL One Player R3T File Format Stack Overflow at http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0005.html.
- RealNetworks, Inc. Releases Update April 6th, 2004, Customer Support - Real Security Updates at http://service.real.com/help/faq/security/040406_r3t/en/.
- BID-10070: RealNetworks RealOne Player/RealPlayer Remote R3T File Stack Buffer Overflow Vulnerability
- CVE-2004-0387: Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
- OSVDB ID: 4977: RealPlayer/RealOne R3T Plugin Overflow
- RHSA-2005-299: realplayer security update
- SA11314: RealPlayer/RealOne R3T File Handling Buffer Overflow Vulnerability
Reported:
Apr 06, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net