APP: RealNetworks RealText Error Message Buffer Overflow

This signature detects attempts to exploit a known vulnerability against RealNetworks RealText. RealPlayer versions 1.6 and earlier are vulnerable. Attackers can craft malicious documents containing invalid version and name information. A successful attack can allow a remote attacker to execute arbitrary code and create files on the target client's system.

Extended Description

RealPlayer is prone to a remote heap-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Specifically, the application fails to bounds-check user-supplied data contained in RealText files, resulting in the possibility of overflowing a heap buffer. Attackers can control the contents of critical memory control structures and write arbitrary data to arbitrary memory locations. Exploiting this issue allows attackers to execute arbitrary machine code in the context of the user running the affected application.

Affected Products

Suse linux_desktop

References

BugTraq: 14048

CVE: CVE-2005-1766

URL: http://www.idefense.com/application/poi/display?id=250&type=vulnerabilities http://service.real.com/help/faq/security/050623_player/EN/

Short Name

APP:REAL:REALTEXT-ERR-OF

Severity

Minor

Recommended

False

Recommended Action

Drop

APP: RealNetworks RealText Error Message Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?