APP: RealPlayer SMIL File Handling Overflow

This signature detects attempts to exploit a known vulnerability in the RealNetworks RealPlayer media application. Attackers can create a malformed Synchronized Multimedia Integration Language (SMIL) file that, when downloaded by a user, is processed without user intervention. Attackers can execute arbitrary code with the privileges of the target user.

Extended Description

RealNetworks RealPlayer and RealOne Player are reported prone to a remote stack based buffer overflow vulnerability. The issue exists due to a lack of boundary checks performed by the application when parsing Synchronized Multimedia Integration Language (SMIL) files. A remote attacker may execute arbitrary code on a vulnerable computer to gain unauthorized access. This vulnerability is reported to exist in RealNetworks products for Microsoft Windows, Linux, and Apple Mac platforms.

Affected Products

Real_networks realone_player

References

BugTraq: 12698

CVE: CVE-2005-0455

URL: http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities&flashstatus=false http://service.real.com/help/faq/security/050224_player/EN/

Short Name

APP:REAL:PLAYER-SMIL-OF

Severity

Major

Recommended

False

Recommended Action

Drop

APP: RealPlayer SMIL File Handling Overflow

Extended Description

Affected Products

References

Found a potential security threat?