Detections
Analytics
RealPlayer for Windows Multiple Overflows
high Nessus Plugin ID 20184
Synopsis
The remote Windows application is affected by several overflow vulnerabilities.Description
According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows on the remote host is affected by multiple buffer overflow vulnerabilities.An attacker may be able to leverage these issues to execute arbitrary code on the remote host subject to the permissions of the user running the affected application. Note that a user doesn't necessarily need to explicitly access a malicious media file since the browser may automatically pass to the application RealPlayer skin files (ie, files with the extension '.rjs').
Solution
Upgrade according to the vendor advisories referenced above.See Also
https://www.beyondtrust.com/resources/blog/research/
https://www.securityfocus.com/archive/1/416475
http://service.real.com/help/faq/security/security111005.html
Plugin Details
Severity: High
ID: 20184
File Name: realplayer_6012.nasl
Version: 1.19
Type: local
Agent: windows
Family: Windows
Published: 11/11/2005
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:realnetworks:realplayer
Required KB Items: SMB/RealPlayer/Product, SMB/RealPlayer/Build
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/10/2005
Vulnerability Publication Date: 11/10/2005