An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI.

According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities :

  - A 'QCP' parsing heap-based buffer overflow vulnerability     exists. (CVE-2010-2578)

  - An uninitialized pointer vulnerability exists in the     CDDA URI ActiveX control. (CVE-2010-3747)

  - A stack overflow vulnerability exists in the RichFX     component. (CVE-2010-3748)

  - A parameter injection vulnerability exists in the     RecordClip browser extension. (CVE-2010-3749)

  - A remote code execution vulnerability exists in     RJMDSections. (CVE-2010-3750)

The remote host is running RealPlayer, a multi-media application.

RealPlayer SP builds earlier than 12.0.0.879 are potentially affected by multiple vulnerabilities :

  - A RealPlayer malformed 'IVR' pointer index code execution vulnerability exists. (CVE-2010-2996, CVE-2010-2998)

A RealPlayerActiveX unauthorized file access vulnerability exists. (CVE-2010-3002)

A RealPlayer 'QCP' file parsing integer overflow vulnerability exists. (CVE-2010-0116)

A vulnerability exists in the way RealPlayer processes the dimensions in the 'YUV420' transformation of 'MP4' content. (CVE-2010-0117)

A heap-based buffer overflow vulnerability exists in RealPlayer's 'QCP' parsing. (CVE-20010-0120)

A vulnerability exists in the ActiveX IE plugin relating to the opening of multiple browser windows. (CVE-2010-3001)

  - An uninitialized pointer vulnerability exists in the CDDA URI ActiveX Control. (CVE-2010-3747)  - A remote code execution vulnerability exists in RJMDSections. (CVE-210-3750)  - A RealPlayer 'QCP' parsing heap-based buffer overflow vulnerability exists. (CVE-2010-2578)

  - A remote code execution issue exists in multiple protocol handlers for the RealPlayer ActiveX control. (CVE-2010-3751)

  - A stack overflow vulnerability exists in the RichFX component. (CVE-2010-3748)

  - A paramenter injection vulnerability exists in the RecordClip browser extension. (CVE-2010-3749)

According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities :

  - A RealPlayer malformed 'IVR' pointer index code     execution vulnerability exists.     (CVE-2010-2996, CVE-2010-2998)

  - A RealPlayerActiveX unauthorized file access     vulnerability exists. (CVE-2010-3002)

  - A RealPlayer 'QCP' file parsing integer overflow     vulnerability exists. (CVE-2010-0116)

  - A vulnerability exists in the way RealPlayer processes     the dimensions in the 'YUV420' transformation of 'MP4'     content. (CVE-2010-0117)

  - A heap-based buffer overflow vulnerability exists in     RealPlayer's 'QCP' parsing. (CVE-2010-0120)

  - A vulnerability exists in the ActiveX IE plugin relating     to the opening of multiple browser windows.     (CVE-2010-3001)

  - Multiple integer overflow vulnerabilities exist in     RealPlayer's 'FLV' parsing. (CVE-2010-3000)     
  - An uninitialized pointer vulnerability exists in the     CDDA URI ActiveX Control. (CVE-2010-3747)     
  - A remote code execution vulnerability exists in     RJMDSections. (CVE-2010-3750)     
  - A RealPlayer 'QCP' parsing heap-based buffer overflow     vulnerability exists. (CVE-2010-2578)

  - A remote code execution issue exists in multiple     protocol handlers for the RealPlayer ActiveX control.
    (CVE-2010-3751)

  - A stack overflow vulnerability exists in the RichFX     component. (CVE-2010-3748)

  - A parameter injection vulnerability exists in the     RecordClip browser extension. (CVE-2010-3749)

ID	Name	Product	Family	Severity
50022	RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities	Nessus	Windows	high
5650	Real Networks RealPlayer SP < 1.1.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
48907	RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-3747

critical

Tenable Plugins

high

high

high