PT-2006-2379 · Realnetworks+1 · Realplayer+3

Greg Macmanus + 2 · Published 2006-03-23 · Updated 2017-07-20 · CVE-2006-1370

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 6.0.12.1040 through 6.0.12.1348 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 8 RealPlayer Enterprise before 20060322

Description A buffer overflow issue exists, allowing remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file.

Recommendations For RealPlayer versions 6.0.12.1040 through 6.0.12.1348, update to a version outside of this range to resolve the issue. For RealPlayer 10, consider upgrading to a newer version to mitigate the risk. For RealOne Player v2 and RealOne Player v1, restrict the use of malicious Mimio boardCast (mbc) files until a patch is available. For RealPlayer 8, avoid using the vulnerable component until a fix is provided. For RealPlayer Enterprise before 20060322, update to a version 20060322 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-1370

Affected Products

Mimio Boardcast

Realone Player

Realplayer

Realplayer Enterprise

References · 8

• http://service.real.com/realplayer/security/03162006_player/en · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-1370 · Security Note
• http://secunia.com/advisories/19358 · Vendor Advisory
• http://securitytracker.com/id?1015810 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25411 · Note
• http://securityfocus.com/bid/17202 · Note
• http://kb.cert.org/vuls/id/451556 · Note
• http://vupen.com/english/advisories/2006/1057 · Note