Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.

An updated HelixPlayer package that fixes a buffer overflow issue is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

HelixPlayer is a media player.

A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafted RAM file which could execute arbitrary code when opened by a user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0755 to this issue.

All users of HelixPlayer are advised to upgrade to this updated package, which contains HelixPlayer version 10.0.4 and is not vulnerable to this issue.

---------------------------------------------------------------------

  - Sat Mar 19 2005 John (J5) Palmieri <johnp at redhat.com>     1:1.0.4-1.0.fc3.1

  - Update to upstream version 1.0.4 to fix 155386

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200504-21 (RealPlayer, Helix Player: Buffer overflow vulnerability)

    Piotr Bania has discovered a buffer overflow vulnerability in     RealPlayer and Helix Player when processing malicious RAM files.
  Impact :

    By enticing a user to play a specially crafted RAM file an     attacker could execute arbitrary code with the permissions of the user     running the application.
  Workaround :

    There is no known workaround at this time.

An updated RealPlayer package that fixes a buffer overflow issue is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

RealPlayer is a media player providing solid media playback locally and via streaming. It plays RealAudio, RealVideo, MP3, 3GPP Video, Flash, SMIL 2.0, JPEG, GIF, PNG, RealPix and RealText and more.

A buffer overflow bug was found in the way RealPlayer processes RAM files. An attacker could create a specially crafted RAM file which could execute arbitrary code when opened by a user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0755 to this issue.

All users of RealPlayer are advised to upgrade to this updated package, which contains RealPlayer version 10.0.4 and is not vulnerable to this issue.

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory.

    HelixPlayer is a media player.

    A buffer overflow bug was found in the way HelixPlayer processes RAM files.
    An attacker could create a specially crafted RAM file which could execute     arbitrary code when opened by a user. The Common Vulnerabilities and     Exposures project (cve.mitre.org) has assigned the name CAN-2005-0755 to     this issue.

    All users of HelixPlayer are advised to upgrade to this updated package,     which contains HelixPlayer version 10.0.4 and is not vulnerable to this     issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An updated RealPlayer package that fixes a buffer overflow issue is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

RealPlayer is a media player that provides solid media playback locally and via streaming. It plays RealAudio, RealVideo, MP3, 3GPP Video, Flash, SMIL 2.0, JPEG, GIF, PNG, RealPix and RealText and more.

A buffer overflow bug was found in the way RealPlayer processes RAM files. An attacker could create a specially crafted RAM file which could execute arbitrary code when opened by a user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0755 to this issue.

All users of RealPlayer are advised to upgrade to this updated package, which contains RealPlayer version 10.0.4 and is not vulnerable to this issue.

ID	Name	Product	Family	Severity
21932	CentOS 4 : HelixPlayer (CESA-2005:392)	Nessus	CentOS Local Security Checks	medium
19653	Fedora Core 3 : HelixPlayer-1.0.4-1.0.fc3.1 (2005-329)	Nessus	Fedora Local Security Checks	medium
18121	GLSA-200504-21 : RealPlayer, Helix Player: Buffer overflow vulnerability	Nessus	Gentoo Local Security Checks	medium
18111	RHEL 3 : RealPlayer (RHSA-2005:394)	Nessus	Red Hat Local Security Checks	medium
18110	RHEL 4 : HelixPlayer (RHSA-2005:392)	Nessus	Red Hat Local Security Checks	critical
18108	RHEL 4 : RealPlayer (RHSA-2005:363)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2005-0755

critical

Tenable Plugins

medium

medium

medium

medium

critical

medium