PT-2007-4681 · Realnetworks+1 · Realplayer+4

Published 2007-06-26 · Updated 2017-10-11 · CVE-2007-3410

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 10 through 10.1 RealOne Player (affected versions not specified) RealPlayer Enterprise (affected versions not specified) Helix Player versions 10.0.5 through 10.0.8 Helix Player version 10.5-GOLD

Description The issue is a stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function, which can be exploited by remote attackers to execute arbitrary code. This is achieved through an SMIL file with a long wallclock value.

Recommendations For RealPlayer versions 10 through 10.1, update to a version that fixes the SmilTimeValue::parseWallClockValue function issue. For RealOne Player, apply the necessary patch or configuration change as recommended by the vendor to fix the issue in the SmilTimeValue::parseWallClockValue function. For RealPlayer Enterprise, update to a version that fixes the SmilTimeValue::parseWallClockValue function issue or apply the recommended configuration change. For Helix Player versions 10.0.5 through 10.0.8, update to a version that fixes the SmilTimeValue::parseWallClockValue function issue. For Helix Player version 10.5-GOLD, update to a version that fixes the SmilTimeValue::parseWallClockValue function issue.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3410

RHSA-2007:0605

RHSA-2007:0841

RHSA-2007_0605

Affected Products

Helix Player

Realone Player

Realplayer

Realplayer Enterprise

Red Hat

References · 25

• 🔥 https://exploit-db.com/exploits/4118 · Exploit
• http://secunia.com/advisories/26463 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200709-05.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3410 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0605.html · Vendor Advisory
• http://secunia.com/advisories/25819 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0841.html · Vendor Advisory
• http://secunia.com/advisories/25859 · Vendor Advisory
• http://secunia.com/advisories/26828 · Vendor Advisory
• http://secunia.com/advisories/27361 · Vendor Advisory
• http://securitytracker.com/id?1018299 · Note
• https://access.redhat.com/errata/RHSA-2007:0605 · Note
• http://attrition.org/pipermail/vim/2007-October/001841.html · Note
• http://kb.cert.org/vuls/id/770904 · Note
• http://osvdb.org/37374 · Note