Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
realnetworks helix player 10.0.2 |
||
realnetworks helix player 10.0.3 |
||
realnetworks helix player 10.0.4 |
||
realnetworks realone player 1.0 |
||
realnetworks realone player 2.0 |
||
realnetworks realplayer 10.0.3 |
||
realnetworks realplayer 10.0.4 |
||
realnetworks realplayer 10.5_6.0.12.1069 |
||
realnetworks realplayer 10.5_6.0.12.1235 |
||
realnetworks helix player 10.0.1 |
||
realnetworks realone player 0.288 |
||
realnetworks realone player 0.297 |
||
realnetworks realplayer 10.0.1 |
||
realnetworks realplayer 10.0.2 |
||
realnetworks realplayer 10.5_6.0.12.1053 |
||
realnetworks realplayer 10.5_6.0.12.1056 |
||
realnetworks realplayer 10.5_6.0.12.1059 |
||
realnetworks helix player 10.0 |
||
realnetworks realone player |
||
realnetworks realplayer 10.0.0.305 |
||
realnetworks realplayer 10.0.0.331 |
||
realnetworks realplayer 10.5 |
||
realnetworks realplayer 10.5_6.0.12.1040 |
||
realnetworks rhapsody 3.0_build_0.815 |
||
realnetworks helix player 10.0.5 |
||
realnetworks helix player 10.0.6 |
||
realnetworks realplayer |
||
realnetworks realplayer 10.0 |
||
realnetworks realplayer 10.0.5 |
||
realnetworks realplayer 10.0.6 |
||
realnetworks realplayer 8.0 |
||
realnetworks rhapsody 3.0 |
Vulmon