PT-2006-1396 · Realnetworks · Helix Player+3

Greg Macmanus + 2 · Published 2006-03-23 · Updated 2018-10-19 · CVE-2006-0323

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 10.x RealOne Player (affected versions not specified) Rhapsody version 3 Helix Player (affected versions not specified)

Description The issue is related to a buffer overflow in the swfformat.dll component. This can be exploited by remote attackers through a crafted SWF (Flash) file, allowing them to execute arbitrary code. The exploitation can occur via a size value in the SWF file that is less than the actual size, or through other unspecified manipulations of the file.

Recommendations For RealPlayer version 10.x, update to a version that includes a fix for the buffer overflow in swfformat.dll. For RealOne Player, Rhapsody version 3, and Helix Player, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-0323

Affected Products

Helix Player

Realone Player

Realplayer

Rhapsody

References · 18

• 🔥 https://exploit-db.com/exploits/27460 · Exploit
• 🔥 https://exploit-db.com/exploits/1622 · Exploit
• 🔥 http://securityfocus.com/bid/17202 · Exploit
• http://kb.cert.org/vuls/id/231028 · Patch
• http://secunia.com/advisories/19362 · Vendor Advisory
• http://secunia.com/advisories/19358 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_18_realplayer.html · Vendor Advisory
• http://secunia.com/advisories/19365 · Vendor Advisory
• http://secunia.com/advisories/19390 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0257.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200603-24.xml · Vendor Advisory
• http://service.real.com/realplayer/security/03162006_player/en · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0323 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25408 · Note
• http://securitytracker.com/id?1015806 · Note