HTTP: RealPlayer IVR Heap Buffer Overflow

This signature detects attempts to exploit a known vulnerability in RealNetworks RealPlayer. The problem occurs in the 'rvrender.dll' module when parsing specially crafted '.ivr' files. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Real Networks RealPlayer is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. RealPlayer 14.0.1.633 and prior are vulnerable.

Affected Products

Real_networks realplayer

References

BugTraq: 46946

CVE: CVE-2011-1525

Short Name

HTTP:STC:IVR-OF-1

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: RealPlayer IVR Heap Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?