PT-2010-5038 · Realnetworks · Realplayer Enterprise+2

Chkr_D591 · Published 2010-10-15 · Updated 2011-09-22 · CVE-2010-3747

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.4 RealPlayer Enterprise version 2.1.2

Description The issue arises from an ActiveX control in RealPlayer that fails to properly initialize an object component when parsing a CDDA URI. This can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in an uninitialized pointer dereference and application crash, via a long URI.

Recommendations For RealPlayer versions 11.0 through 11.1, update to a version that properly initializes the object component during CDDA URI parsing. For RealPlayer SP versions 1.0 through 1.1.4, update to a version that properly initializes the object component during CDDA URI parsing. For RealPlayer Enterprise version 2.1.2, update to a version that properly initializes the object component during CDDA URI parsing. As a temporary workaround, consider restricting access to the CDDA URI parsing functionality until a patch is available.

Exploit

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3747

ZDI-10-210

Affected Products

Realplayer

Realplayer Enterprise

Realplayer Sp

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/realplayer_cdda_uri.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16998 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3747 · Security Note
• http://service.real.com/realplayer/security/10152010_player/en · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-10-210 · Security Note
• http://securityreason.com/securityalert/8147 · Note
• http://securityfocus.com/bid/44144 · Note
• http://zerodayinitiative.com/advisories/ZDI-10-210 · Note