National Cyber-Alert System

Vulnerability Summary for CVE-2008-1309

Overview

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (03/18/2008)

Not vulnerable. This issue did not affect versions of RealPlayer as shipped with Red Hat Enterprise Linux 3 Extras, 4 Extras, or 5 Supplementary.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#831457

Name: VU#831457

Hyperlink:http://www.kb.cert.org/vuls/id/831457

External Source: VUPEN

Name: ADV-2008-2194

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2008/2194/references

External Source: XF

Name: realplayer-realaudioobjects-bo(41087)

Hyperlink:http://xforce.iss.net/xforce/xfdb/41087

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-08-047/

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-08-047/

External Source: SECTRACK

Name: 1020563

Hyperlink:http://www.securitytracker.com/id?1020563

External Source: SECTRACK

Name: 1019576

Hyperlink:http://www.securitytracker.com/id?1019576

External Source: BID

Name: 28157

Hyperlink:http://www.securityfocus.com/bid/28157

External Source: BUGTRAQ

Name: 20080725 ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/494779/100/0/threaded

External Source: MILW0RM

Name: 5332

Hyperlink:http://www.milw0rm.com/exploits/5332

External Source: VUPEN

Name: ADV-2008-0842

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/0842

External Source: CONFIRM

Name: http://service.real.com/realplayer/security/07252008_player/en/

Type: Advisory

Hyperlink:http://service.real.com/realplayer/security/07252008_player/en/

External Source: SECUNIA

Name: 29315

Type: Advisory

Hyperlink:http://secunia.com/advisories/29315

External Source: FULLDISC

Name: 20080310 Real Networks RealPlayer ActiveX Control Heap Corruption

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html