Signature Detail

HTTP: RealPlayer URL Parsing Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in RealPlayer URL Parsing. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.

Affected Products

• realnetworks realplayer 10.0
• realnetworks realplayer 10.5
• realnetworks realplayer 11.0
• realnetworks realplayer 11.0.1
• realnetworks realplayer 11.0.2
• realnetworks realplayer 11.0.2.1744
• realnetworks realplayer 11.0.2.2315
• realnetworks realplayer 11.0.3
• realnetworks realplayer 11.0.4
• realnetworks realplayer 11.0.5
• realnetworks realplayer 11.1
• realnetworks realplayer 11.1.3
• realnetworks realplayer 11_build_6.0.14.748
• realnetworks realplayer 12.0.0.1444
• realnetworks realplayer 12.0.0.1548
• realnetworks realplayer 14.0.0
• realnetworks realplayer 14.0.1
• realnetworks realplayer 14.0.1.609
• realnetworks realplayer 14.0.2
• realnetworks realplayer 14.0.3
• realnetworks realplayer 14.0.4
• realnetworks realplayer 14.0.5
• realnetworks realplayer 15.0.0
• realnetworks realplayer 15.02.71
• realnetworks realplayer 15.0.4
• realnetworks realplayer 15.0.4.43
• realnetworks realplayer 15.0.5.109
• realnetworks realplayer 15.0.6.14
• realnetworks realplayer 4
• realnetworks realplayer 5
• realnetworks realplayer 6
• realnetworks realplayer 7
• realnetworks realplayer 8
• realnetworks realplayer up to 16.0.0
• realnetworks realplayer_sp 1.0.0
• realnetworks realplayer_sp 1.0.1
• realnetworks realplayer_sp 1.0.2
• realnetworks realplayer_sp 1.0.5
• realnetworks realplayer_sp 1.1
• realnetworks realplayer_sp 1.1.1
• realnetworks realplayer_sp 1.1.2
• realnetworks realplayer_sp 1.1.3
• realnetworks realplayer_sp 1.1.4
• realnetworks realplayer_sp 1.1.5

References

• BugTraq: 56956
• CVE: CVE-2012-5691