xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

RealPlayer RealFlash 源加载缓冲区溢出漏洞


发布时间:2002-11-26
更新时间:2002-11-26
严重程度:
威胁程度:远程拒绝服务
错误类型:边界检查错误
利用方式:客户机模式

BUGTRAQ ID:6230

受影响系统
Real Networks RealOne Player
Real Networks RealOne Player 2.0
Real Networks RealPlayer G2
Real Networks RealPlayer 6.0 Win32
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0 SP1
   - Microsoft Windows NT Server 4.0 SP2
   - Microsoft Windows NT Server 4.0 SP3
   - Microsoft Windows NT Server 4.0 SP4
   - Microsoft Windows NT Server 4.0 SP5
   - Microsoft Windows NT Server 4.0 SP6
   - Microsoft Windows NT Server 4.0 SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0 SP1
   - Microsoft Windows NT Workstation 4.0 SP2
   - Microsoft Windows NT Workstation 4.0 SP3
   - Microsoft Windows NT Workstation 4.0 SP4
   - Microsoft Windows NT Workstation 4.0 SP5
   - Microsoft Windows NT Workstation 4.0 SP6
   - Microsoft Windows NT Workstation 4.0 SP6a
Real Networks RealPlayer 7.0 Win32
Real Networks RealPlayer 8.0 Win32
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 98
   - Microsoft Windows 98 SP1
   - Microsoft Windows 98SE
   - Microsoft Windows ME
   - Microsoft Windows NT 4.0 SP4
   - Microsoft Windows NT 4.0 SP5
   - Microsoft Windows NT 4.0 SP6a
   - Microsoft Windows XP
   - Microsoft Windows XP Home
   - Microsoft Windows XP Professional
详细描述
RealOne Player中在浏览恶意的RealFlash影片会存在缓冲区溢出漏洞。当用户试图播放该影片的时候,缓冲区会被溢出,造成内存问题。

成功利用该漏洞,攻击者可以用RealOne Player运行的权限执行代码。

测试代码
尚无

解决方案
下载最新的补丁。
    注:据称Real Networks 的补丁并没有解决该漏洞。

Real Networks RealPlayer G2:
Real Networks RealOne Player :

Real Networks Upgrade skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp

Real Networks RealOne Player 2.0:

Real Networks Upgrade skinpatchr11s.rmp
http://service.real.com/help/faq/security/07092002/skinpatchr11s.rmp

相关信息
相关连接:
http://www.service.real.com/help/faq/security/bufferoverrun_player.html
http://www.theregister.co.uk/content/55/28308.html