PT-2010-5461 · Realnetworks+1 · Realplayer Enterprise+5

Hossein Lotfi · Published 2010-12-10 · Updated 2011-01-26 · CVE-2010-4384

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer Enterprise version 2.1.2 Mac RealPlayer versions 11.0 through 11.1 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6

Description The issue is related to an array index error in the Media Properties Header parsing functionality. This error allows remote attackers to execute arbitrary code via a malformed Media Properties Header in a RealMedia file. No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations For RealPlayer versions 11.0 through 11.1, update to a version that fixes the Media Properties Header parsing issue. For RealPlayer Enterprise version 2.1.2, update to a version that fixes the Media Properties Header parsing issue. For Mac RealPlayer versions 11.0 through 11.1, update to a version that fixes the Media Properties Header parsing issue. For Linux RealPlayer version 11.0.2.1744, update to a version that fixes the Media Properties Header parsing issue. For HelixPlayer version 1.0.6, update to a version that fixes the Media Properties Header parsing issue. As a temporary workaround, consider avoiding the use of RealMedia files from untrusted sources until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-4384

RHSA-2010:0981

RHSA-2010_0981

ZDI-10-268

Affected Products

Helix Player

Linux Realplayer

Mac Realplayer

Realplayer

Realplayer Enterprise

Red Hat

References · 17

• http://redhat.com/support/errata/RHSA-2010-0981.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-10-268 · Security Note
• http://service.real.com/realplayer/security/12102010_player/en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4384 · Security Note
• https://access.redhat.com/security/cve/CVE-2010-4378 · Note
• https://access.redhat.com/security/cve/CVE-2010-4384 · Note
• https://access.redhat.com/security/cve/CVE-2010-4383 · Note
• https://access.redhat.com/security/cve/CVE-2010-4385 · Note
• https://access.redhat.com/security/cve/CVE-2010-4375 · Note
• https://access.redhat.com/security/cve/CVE-2010-4382 · Note
• https://access.redhat.com/errata/RHSA-2010:0981 · Note
• https://access.redhat.com/security/cve/CVE-2010-2997 · Note
• https://access.redhat.com/security/cve/CVE-2010-4392 · Note
• https://access.redhat.com/security/cve/CVE-2010-4379 · Note
• https://access.redhat.com/security/cve/CVE-2010-4386 · Note