HTTP: RealMedia RealPlayer Ierpplug.DLL ActiveX Control Overflow

This signature detects attempts to use unsafe ActiveX controls used by RealMedia RealPlayer. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Real Networks RealPlayer SP is prone to a remote code-execution vulnerability because it fails to sufficiently validate user-supplied data. Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control. Versions prior to and including RealPlayer SP 1.1 for Windows are vulnerable. NOTE: This issue was previously discussed in BID 44144 (Real Networks RealPlayer SP and RealPlayer Enterprise Multiple Security Vulnerabilities) but has been given its own record to better document it.

Affected Products

Real_networks realplayer_sp

References

BugTraq: 22811 30379 44443 26130

CVE: CVE-2008-3066

URL: http://service.real.com/realplayer/security/10152010_player/en/ http://service.real.com/realplayer/security/191007_player/en/

Short Name

HTTP:STC:ACTIVEX:REAL-IERPCTL

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: RealMedia RealPlayer Ierpplug.DLL ActiveX Control Overflow

Extended Description

Affected Products

References

Found a potential security threat?