National Cyber Awareness System

Vulnerability Summary for CVE-2009-0376

Overview

Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plugin.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: realplayer-ivr-code-execution(48568)

Hyperlink:http://xforce.iss.net/xforce/xfdb/48568

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-10-009/

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-10-009/

External Source: VUPEN

Name: ADV-2010-0178

Hyperlink:http://www.vupen.com/english/advisories/2010/0178

External Source: BID

Name: 33652

Hyperlink:http://www.securityfocus.com/bid/33652

External Source: BUGTRAQ

Name: 20100121 ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/509097/100/0/threaded

External Source: BUGTRAQ

Name: 20090206 RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/500722/100/0/threaded

External Source: MISC

Name: http://www.fortiguardcenter.com/advisory/FGA-2009-04.html

Hyperlink:http://www.fortiguardcenter.com/advisory/FGA-2009-04.html

External Source: CONFIRM

Name: http://service.real.com/realplayer/security/01192010_player/en/

Hyperlink:http://service.real.com/realplayer/security/01192010_player/en/

External Source: SECUNIA

Name: 38218

Hyperlink:http://secunia.com/advisories/38218

External Source: SECUNIA

Name: 33810

Hyperlink:http://secunia.com/advisories/33810