Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: Windows --> Category: infos

RealPlayer File Handler Code Execution Vulnerability Scan


Vulnerability Scan Summary
Acertains the version of RealPlayer

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote Windows application is affected by several remote flaws.

Description :

According to its version number, the installed version of RealPlayer /
RealOne Player / RealPlayer Enterprise has a flaw that may allow an
attacker to execute arbitrary code on the remote host, with the
rights of the user running RealPlayer, using specially-crafted RP,
RT, RAM, RPM or SMIL files.

In addition, it may allow a possible hacker to download and execute
arbitrary code on the affected system using specially-crafted RMP
files.

See also :

http://www.ngssoftware.com/advisories/realone.txt
http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0442.html
http://service.real.com/help/faq/security/040123_player/EN/

Solution :

Upgrade according to the vendor advisories referenced above.

Threat Level:

High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.