RealNetworks RealPlayer SWF frame buffer overflow

realplayer-swf-frame-bo (43996) The risk level is classified as HighHigh Risk

Description:

RealPlayer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking of Shockwave Flash frames. By persuading a victim to open a specially-crafted Shockwave Flash file, a remote attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash.

Platforms Affected:

  • Gentoo, Linux
  • Real, RealPlayer 10.0
  • Real, RealPlayer 10.5_build_6.0.12.1040
  • Real, RealPlayer 10.5_build_6.0.12.1053
  • Real, RealPlayer 10.5_build_6.0.12.1059
  • Real, RealPlayer 10.5_build_6.0.12.1069
  • Real, RealPlayer 10.5_build_6.0.12.1235
  • Real, RealPlayer 10.5_build_6.0.12.1348
  • Real, RealPlayer 10.5_build_6.0.12.1578
  • Real, RealPlayer 10.5_build_6.0.12.1663
  • Real, RealPlayer 10.5_build_6.0.12.1698
  • Real, RealPlayer 10.5_build_6.0.12.1741
  • Real, RealPlayer Enterprise
  • Real, RealPlayer for Linux 10
  • Real, RealPlayer for Mac OS X 10.1_build_10.0.0.396
  • Real, RealPlayer for Mac OS X 10.1_build_10.0.0.412
  • Real, RealPlayer for Mac OS X 10.1_build_10.0.0.481
  • Real, RealPlayer for Mac OS X 10.1_build_10.0.0.503
  • Real, RealPlayer for Mac OS X 10_build_10.0.0.305
  • Real, RealPlayer for Mac OS X 10_build_10.0.0.331
  • Real, RealPlayer for Mac OS X 10_build_10.0.0.352
  • RedHat, RHEL Desktop Supplementary 5 Client
  • RedHat, RHEL Extras 3
  • RedHat, RHEL Extras 4
  • RedHat, RHEL Supplementary 5 Server

Remedy:

Refer to the Real Player Customer Support Web site for patch, upgrade or suggested workaround information. See References.

Consequences:

Gain Access

References:

Reported:

Jul 25, 2008

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page