Signature Detail
Short Name |
HTTP:STC:STREAM:REALPLAYER-QCP |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
RealNetworks RealPlayer QCP Parsing Buffer Overflow |
Release Date |
2011/08/23 |
Update Number |
1979 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: RealNetworks RealPlayer QCP Parsing Buffer Overflow
This signature detects attempts to exploit a known vulnerability in RealNetworks RealPlayer. The vulnerability is due to insufficient bounds checking while copying user-supplied data into a fixed-length buffer. This can lead to a buffer overflow and subsequent memory corruption. A remote attacker can exploit this vulnerability by enticing a user to download and process a malicious QCP file with a vulnerable version of the application. A successful attack would result in the execution of attacker-controlled code in the security context of the current user.
Extended Description
Real Networks RealPlayer is prone to a remote code-execution vulnerability. Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Failed attacks may cause denial-of-service conditions. Versions prior to RealPlayer for Windows 14.0.6 are vulnerable. NOTE: This issue was previously discussed in BID 49169 (Real Networks RealPlayer Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Affected Products
- Real Networks RealPlayer 11.0.1
- Real Networks RealPlayer 11.0.2
- Real Networks RealPlayer 11.0.2.1744
- Real Networks RealPlayer 11.0.2.2315
- Real Networks RealPlayer 11.0.3
- Real Networks RealPlayer 11.0.4
- Real Networks RealPlayer 11.0.5
- Real Networks RealPlayer 11.1
- Real Networks RealPlayer 14.0.0
- Real Networks RealPlayer 14.0.1
- Real Networks RealPlayer 14.0.1.609
- Real Networks RealPlayer 14.0.1.633
- Real Networks RealPlayer 14.0.2
- Real Networks RealPlayer 14.0.2.633
- Real Networks RealPlayer 14.0.3
- Real Networks RealPlayer 14.0.5
- Real Networks RealPlayer SP 1.0.0
- Real Networks RealPlayer SP 1.0.1
- Real Networks RealPlayer SP 1.0.2
- Real Networks RealPlayer SP 1.0.5
- Real Networks RealPlayer SP 1.1
- Real Networks RealPlayer SP 1.1.1
- Real Networks RealPlayer SP 1.1.2
- Real Networks RealPlayer SP 1.1.3
- Real Networks RealPlayer SP 1.1.4
- Real Networks RealPlayer SP 1.1.5
References
- BugTraq: 49172
- CVE: CVE-2011-2950