|
|
Family: Windows --> Category: infos
RealPlayer File Handler Code Execution Vulnerability Scan
Vulnerability Scan Summary
Acertains the version of RealPlayer
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote Windows application is affected by several remote flaws.
Description :
According to its version number, the installed version of RealPlayer /
RealOne Player / RealPlayer Enterprise has a flaw that may allow an
attacker to execute arbitrary code on the remote host, with the
rights of the user running RealPlayer, using specially-crafted RP,
RT, RAM, RPM or SMIL files.
In addition, it may allow a possible hacker to download and execute
arbitrary code on the affected system using specially-crafted RMP
files.
See also :
http://www.ngssoftware.com/advisories/realone.txt
http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0442.html
http://service.real.com/help/faq/security/040123_player/EN/
Solution :
Upgrade according to the vendor advisories referenced above.
Threat Level:
High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
