Signature Detail
Short Name |
APP:REAL:SMIL-WALLCLOCK-OF |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
RealNetworks RealPlayer SMIL Wallclock Stack Overflow |
Release Date |
2007/07/23 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: RealNetworks RealPlayer SMIL Wallclock Stack Overflow
This signature detects attempts to exploit a known vulnerability in RealNetworks RealPlayer. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.
Extended Description
RealPlayer and HelixPlayer are prone to a buffer-overflow vulnerability because the applications fail to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
Affected Products
- Gentoo Linux
- Real Networks HelixPlayer 10.5 - GOLD
- Real Networks Helix Player for Linux 10.0.5
- Real Networks Helix Player for Linux 10.0.6
- Real Networks Helix Player for Linux 10.0.7
- Real Networks RealOne Player 1.0.0
- Real Networks RealOne Player for Mac
- Real Networks RealPlayer 10.5-GOLD
- Real Networks RealPlayer 10 for Linux 10.0.5
- Real Networks RealPlayer 10 for Linux 10.0.6
- Real Networks RealPlayer 10 for Linux 10.0.7
- Real Networks RealPlayer 10 for Linux 10.0.8
- Real Networks RealPlayer 10 for Mac OS 10.0.0 .0.331
- Real Networks RealPlayer 10 for Mac OS 10.0.0.305
- Real Networks RealPlayer 10 for Mac OS 10.0.0.352
- Real Networks RealPlayer 10 for Mac OS 10.0.0.396
- Real Networks RealPlayer 10 for Mac OS 10.0.0.412
- Real Networks RealPlayer Enterprise
- Red Hat Enterprise Linux Desktop Version 4
- Red Hat Enterprise Linux AS 4
- Red Hat Enterprise Linux Desktop Supplementary 5 Client
- Red Hat Enterprise Linux ES 4
- Red Hat Enterprise Linux Extras 3
- Red Hat Enterprise Linux Extras 4
- Red Hat Enterprise Linux WS 4
References