RealNetworks RealPlayer SWF frame buffer overflow
| realplayer-swf-frame-bo (43996) |  High Risk |
Description:
RealPlayer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking of Shockwave Flash frames. By persuading a victim to open a specially-crafted Shockwave Flash file, a remote attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash.
Platforms Affected:
- Gentoo, Linux
- Real, RealPlayer 10.0
- Real, RealPlayer 10.5_build_6.0.12.1040
- Real, RealPlayer 10.5_build_6.0.12.1053
- Real, RealPlayer 10.5_build_6.0.12.1059
- Real, RealPlayer 10.5_build_6.0.12.1069
- Real, RealPlayer 10.5_build_6.0.12.1235
- Real, RealPlayer 10.5_build_6.0.12.1348
- Real, RealPlayer 10.5_build_6.0.12.1578
- Real, RealPlayer 10.5_build_6.0.12.1663
- Real, RealPlayer 10.5_build_6.0.12.1698
- Real, RealPlayer 10.5_build_6.0.12.1741
- Real, RealPlayer Enterprise
- Real, RealPlayer for Linux 10
- Real, RealPlayer for Mac OS X 10.1_build_10.0.0.396
- Real, RealPlayer for Mac OS X 10.1_build_10.0.0.412
- Real, RealPlayer for Mac OS X 10.1_build_10.0.0.481
- Real, RealPlayer for Mac OS X 10.1_build_10.0.0.503
- Real, RealPlayer for Mac OS X 10_build_10.0.0.305
- Real, RealPlayer for Mac OS X 10_build_10.0.0.331
- Real, RealPlayer for Mac OS X 10_build_10.0.0.352
- RedHat, RHEL Desktop Supplementary 5 Client
- RedHat, RHEL Extras 3
- RedHat, RHEL Extras 4
- RedHat, RHEL Supplementary 5 Server
Remedy:
Refer to the Real Player Customer Support Web site for patch, upgrade or suggested workaround information. See References.
Consequences:
Gain Access
References:
- Real Player Customer Support Web site, RealNetworks, Inc. Releases Update to Address Security Vulnerabilities at http://service.real.com/realplayer/security/07252008_player/en/.
- Secunia Research 25/07/2008, RealNetworks RealPlayer SWF Frame Handling Buffer Overflow at http://secunia.com/secunia_research/2007-93/advisory/.
- ASA-2008-329: RealPlayer security update (RHSA-2008-0812)
- BID-30370: RealNetworks RealPlayer SWF File Heap Based Buffer Overflow Vulnerability
- CVE-2007-5400: Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file.
- GLSA-200809-03: RealPlayer: Buffer overflow
- RHSA-2008-0812: Critical: RealPlayer security update
- SA27620: RealNetworks RealPlayer Multiple Vulnerabilities
- SA31321: Red Hat Extras and Supplementary RealPlayer Vulnerability
- SECTRACK ID: 1020562: RealPlayer Heap Overflow in Processing SWF File Frames Lets Remote Users Execute Arbitrary Code
- SUSE-SR:2009:011: SUSE Security Summary Report
- US-CERT VU#298651: RealNetworks RealPlayer Shockwave Flash (SWF) file vulnerability
- VUPEN/ADV-2008-2194: RealNetworks RealPlayer Multiple Code Execution Vulnerabilities
Reported:
Jul 25, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net