PT-2007-6621 · Realnetworks · Realplayer+1

Will Dormann · Published 2007-10-20 · Updated 2017-07-29 · CVE-2007-5601

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 10.5, including 10, RealOne Player, and RealOne Player 2 RealPlayer version 11 beta

Description A stack-based buffer overflow issue exists in the Database Component of MPAMedia.dll. This allows remote attackers to execute arbitrary code via certain playlist names. The issue can be demonstrated through the import method to the IERPCtl ActiveX control in ierpplug.dll.

Recommendations For RealPlayer versions prior to 10.5, including 10, RealOne Player, and RealOne Player 2, update to a version later than 10.5 to resolve the issue. For RealPlayer version 11 beta, update to a non-beta version to resolve the issue. As a temporary workaround, consider restricting access to the IERPCtl ActiveX control in ierpplug.dll to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5601

Affected Products

Realone Player

Realplayer

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/realplayer_import.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16497 · Exploit
• 🔥 https://exploit-db.com/exploits/30692 · Exploit
• http://secunia.com/advisories/27248 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5601 · Security Note
• http://us-cert.gov/cas/techalerts/TA07-297A.html · Note
• http://securitytracker.com/id?1018843 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37280 · Note
• http://kb.cert.org/vuls/id/871673 · Note
• http://securityfocus.com/bid/26130 · Note
• http://service.real.com/realplayer/security/191007_player/en · Note
• http://symantec.com/enterprise/security_response/weblog/2007/10/realplayer_exploit_on_the_loos.html · Note
• http://infosecblog.org/2007/10/nasa-bans-ie.html · Note