|
Family: Windows --> Category: infos
RealPlayer Skin File Remote Buffer Overflow Vulnerability Scan
Vulnerability Scan Summary Acertains the version of RealPlayer
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote Windows application is affected by a remote buffer
overflow.
Description :
According to its version number, the installed version of RealPlayer /
RealOne Player for Windows may allow a possible hacker to execute arbitrary
code on the remote host, with the rights of the user running
RealPlayer because of an overflow vulnerability in the third-party
compression library 'DUNZIP32.DLL'.
To do so, a possible hacker would need to send a corrupted skin file (.RJS)
to a remote user and have him open it using RealPlayer.
See also :
http://archives.neohapsis.com/archives/fulldisclosure/2004-10/1044.html
http://service.real.com/help/faq/security/041026_player/EN/
Solution :
Upgrade according to the vendor advisories referenced above.
Threat Level:
High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|