|
|
Family: Windows --> Category: infos
RealPlayer PNG deflate heap corruption Vulnerability Scan
Vulnerability Scan Summary
Acertains the version of RealPlayer
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote Windows application is affected by a heap corruption
vulnerability.
Description :
According to its version number, the installed version of RealPlayer /
RealOne Player / RealPlayer Enterprise for Windows has a flaw in the
remote version that may allow a possible hacker to execute arbitrary code on
the remote host, with the rights of the user running RealPlayer.
To do so, a possible hacker would need to send a corrupted PNG file to a
remote user and have him open it using RealPlayer.
See also :
http://www.coresecurity.com/common/showdoc.php?idx=311&idxseccion=10
http://service.real.com/help/faq/security/securityupdate_march2003.html
Solution :
Upgrade according to the vendor advisories referenced above.
Threat Level:
High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
