Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 83801 - media-video/realplayer + realone: WAV and SMIL File Handling Buffer Overflows
Summary: media-video/realplayer + realone: WAV and SMIL File Handling Buffer Overflows
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All All
: High enhancement (vote)
Assignee: Gentoo Security
URL: http://secunia.com/advisories/14456/
Whiteboard: [masked]
Keywords:
Depends on:
Blocks:
 
Reported: 2005-03-02 04:52 UTC by Jean-François Brunette (RETIRED)
Modified: 2005-04-10 10:50 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jean-François Brunette (RETIRED) gentoo-dev 2005-03-02 04:52:00 UTC
Description:
Two vulnerabilities have been reported in various RealNetworks products, which can be exploited by malicious people to compromise a user's system.

1) A boundary error within the processing of WAV files can be exploited to cause a buffer overflow via a specially crafted WAV file.

2) A boundary error within the processing of SMIL files can be exploited to cause a stack-based buffer overflow via a specially crafted SMIL file.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution:
Apply patches.

Linux Players:
RealPlayer 10:
http://www.real.com/linux

Original Advisory:
RealNetworks:
http://service.real.com/help/faq/security/050224_player/EN/

iDEFENSE:
http://www.idefense.com/applicat...?id=209&type=vulnerabilities
Comment 1 Thierry Carrez (RETIRED) gentoo-dev 2005-03-03 02:50:51 UTC
Realplayer is already masked due to multiple security problems.
Comment 2 Thierry Carrez (RETIRED) gentoo-dev 2005-04-10 10:50:27 UTC
Fixed by unmasking/release of 10.0.3