Searching realone software vulnerabilities

Multiple buffer overflows in RealOne and RealPl

RealPlayer | arbitrary | overflows | attackers | Multiple | execute | RealOne | buffer | remote | allow | code | via |

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.


The PNG deflate algorithm in RealOne Player 6.0

8/RealPlayer | RealPlayer | algorithm | earlier | deflate | RealOne | Player | 6011x | Plus | PNG |

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.


RealOne player allows remote attackers to execu

demonstrated | presentation | references | previously | arbitrary | scripting | attackers | Computer" | executed | security | protocol | RealOne | execute | context | script | remote | allows | player | loaded | using | which | zone | SMIL | "My | URL | via |

RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag.


Multiple buffer overflows in RealOne Player, Re

Enterprise | RealPlayer | attackers | malformed | overflows | arbitrary | Multiple | execute | RealOne | Desktop | Player | buffer | remote | allow | code | via |

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.


Buffer overflow in InnerMedia DynaZip DUNZIP32.

DUNZIP32dll | InnerMedia | overflow | version | DynaZip | Buffer | file |

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.


pnxr3260.dll in the RealOne 2.0 build 6.0.11.86

pnxr3260dll | RealOne | build |

pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embed tag.


Integer overflow in pnen3260.dll in RealPlayer

pnen3260dll | RealPlayer | overflow | through | Integer |

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.


RealOne player 6.0.11.868 allows remote attacke

RealOne | player |

RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.


Stack-based buffer overflow in the CSmil1Parser

Stack-based | overflow | buffer |

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.


Heap-based buffer overflow in RealNetworks Real

RealNetworks | RealPlayer | Heap-based | overflow | buffer |

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.


Heap-based buffer overflow in RealPlayer 10 and

RealPlayer | Heap-based | overflow | earlier | Player | before | buffer | Helix |

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.


Heap-based buffer overflow in vidplin.dll in Re

vidplindll | RealPlayer | Heap-based | overflow | buffer |

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value.


Unknown vulnerability in RealPlayer 10 and 10.5

vulnerability | RealPlayer | Unknown |

Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file.


RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and

RealPlayer |

RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers".


Integer overflow in RealNetworks RealPlayer 8,

RealNetworks | RealPlayer | overflow | Integer |

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.


Heap-based buffer overflow in DUNZIP32.DLL for

DUNZIP32DLL | RealPlayer | Heap-based | overflow | buffer |

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.


Heap-based buffer overflow in the embedded play

RealNetworks | RealPlayer | Heap-based | malicious | including | overflow | versions | products | embedded | multiple | RealOne | servers | service | buffer | player | denial | allows | remote | Helix | cause | 10x |

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.


Unquoted Windows search path vulnerability in R

vulnerability | RealNetworks | RealPlayer | Unquoted | Windows | search | path |

Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before Wednesday, March 22, 2006 might allow local users to gain privileges via a malicious C:\program.exe file.


Buffer overflow in swfformat.dll in multiple Re

swfformatdll | RealNetworks | RealPlayer | including | attackers | arbitrary | overflow | Rhapsody | multiple | versions | products | crafted | RealOne | execute | remote | Player | Buffer | allows | Helix | code | SWF | 10x | via |

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a a size value that is less than the actual size, or (2) other unspecified manipulations.


Buffer overflow in RealNetworks RealPlayer 10.5

RealNetworks | RealPlayer | overflow | Buffer |

Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before Wednesday, March 22, 2006 allows remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file.


Software vulnerabilities results 1 to 20 of 21     
Page: 12►