|
|
RealPlayer RealFlash 源加载缓冲区溢出漏洞 发布时间:2002-11-26 更新时间:2002-11-26 严重程度:中 威胁程度:远程拒绝服务 错误类型:边界检查错误 利用方式:客户机模式
BUGTRAQ ID:6230
受影响系统Real Networks RealOne Player
Real Networks RealOne Player 2.0
Real Networks RealPlayer G2
Real Networks RealPlayer 6.0 Win32
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT Server 4.0
- Microsoft Windows NT Server 4.0 SP1
- Microsoft Windows NT Server 4.0 SP2
- Microsoft Windows NT Server 4.0 SP3
- Microsoft Windows NT Server 4.0 SP4
- Microsoft Windows NT Server 4.0 SP5
- Microsoft Windows NT Server 4.0 SP6
- Microsoft Windows NT Server 4.0 SP6a
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Workstation 4.0 SP1
- Microsoft Windows NT Workstation 4.0 SP2
- Microsoft Windows NT Workstation 4.0 SP3
- Microsoft Windows NT Workstation 4.0 SP4
- Microsoft Windows NT Workstation 4.0 SP5
- Microsoft Windows NT Workstation 4.0 SP6
- Microsoft Windows NT Workstation 4.0 SP6a
Real Networks RealPlayer 7.0 Win32
Real Networks RealPlayer 8.0 Win32
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 98
- Microsoft Windows 98 SP1
- Microsoft Windows 98SE
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows XP
- Microsoft Windows XP Home
- Microsoft Windows XP Professional 详细描述 RealOne Player中在浏览恶意的RealFlash影片会存在缓冲区溢出漏洞。当用户试图播放该影片的时候,缓冲区会被溢出,造成内存问题。
成功利用该漏洞,攻击者可以用RealOne Player运行的权限执行代码。
测试代码 尚无
解决方案 下载最新的补丁。
注:据称Real Networks 的补丁并没有解决该漏洞。
Real Networks RealPlayer G2:
Real Networks RealOne Player :
Real Networks Upgrade skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
Real Networks RealOne Player 2.0:
Real Networks Upgrade skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp
相关信息 相关连接:
http://www.service.real.com/help/faq/security/bufferoverrun_player.html
http://www.theregister.co.uk/content/55/28308.html
|