RealOne Player Has Multiple, Unspecified Buffer Overruns That May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1005790 |
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Dec 11 2002
|
Impact: Denial of service via network, Execution of arbitrary code via network
|
Vendor Confirmed: Yes
|
Description: RealNetworks reported that there are multiple, unspecified buffer overflows in the RealOne Player. A remote user may be able to execute arbitrary code on the player.
The report indicates that there are unresolved buffer overrun errors in RealOne Player that could potentially allow a remote user
to cause arbitrary code to be executed by the player. No details were provided.
RealNetworks announced that they are conducting
a security review of RealOne Player to address multiple buffer overrun vulnerabilities the player software. The goal of the review
is to reduce the risk that any such vulnerabilities remain.
|
Impact: A remote user could cause arbitrary code to be executed on the player with the privileges of the user of the RealOne player.
|
Solution: No solution was available at the time of this entry. RealNetworks plans to issue an update of the RealOne Player by December 25, 2002.
|
Vendor URL: www.service.real.com/help/faq/security/bufferoverrun_player.html (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 11 Dec 2002 17:03:36 -0500
Subject: RealOne buffer overflows
|
http://www.service.real.com/help/faq/security/bufferoverrun_player.html
RealNetworks announced that they are conducting a security review of RealOne Player to
address multiple buffer overrun vulnerabilities the player software. The goal of the
review is to reduce the risk that any such vulnerabilities remain.
The report indicates that there are unresolved buffer overrun errors in RealOne Player
that could allow a remote user to cause arbitrary code to be executed by the player.
RealNetworks plans to issue an update of the RealOne Player by December 25, 2002.
|
|
