HTTP: RealPlayer FLV Memory Corruption

This signature detects attempts to exploit a known vulnerability against RealPlayer FLV decoder. A successful attack can lead to arbitrary code execution.

Extended Description

Real Networks RealPlayer & RealPlayer SP are prone to multiple security vulnerabilities, including remote code-execution issues, an unauthorized access issue, a potential denial-of-service issue, and an unspecified issue. Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application, cause denial-of-service conditions, or access files without proper authorization. Other attacks may also be possible. RealPlayer 11.1 and RealPlayer SP 1.1.4 and prior are vulnerable.

Affected Products

Real_networks realplayer_11_beta

References

BugTraq: 42775

CVE: CVE-2010-2996

URL: http://service.real.com/realplayer/security/08262010_player/en/ http://www.zerodayinitiative.com/advisories/ZDI-10-166/ http://www.zerodayinitiative.com/advisories/ZDI-10-167 http://www.realnetworks.com/ http://secunia.com/secunia_research/2010-8/ http://secunia.com/secunia_research/2010-3/ http://secunia.com/secunia_research/2010-5/

Short Name

HTTP:STC:SWF:REAL-FLV

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: RealPlayer FLV Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?