RealNetworks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability
Publish Date: 15 Februar 2011
Schweregrad:: Kritisch
CVE Kennungen:: CVE-2010-4376
Hinweisdatum: 15 Februar 2011
Beschreibung
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.
Trend Micro Lösungen
Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.
Lösungen
Trend Micro Deep Security DPI Rule Number: 1004554
Trend Micro Deep Security DPI Rule Name: 1004554 - RealNetworks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability
Betroffene Software und Version:
- realnetworks realplayer 11.0
- realnetworks realplayer 11.0.1
- realnetworks realplayer 11.0.2
- realnetworks realplayer 11.0.2.1744
- realnetworks realplayer 11.0.3
- realnetworks realplayer 11.0.4
- realnetworks realplayer 11.0.5
- realnetworks realplayer 11.1
- realnetworks realplayer_sp 1.0.0
- realnetworks realplayer_sp 1.0.1
- realnetworks realplayer_sp 1.0.2
- realnetworks realplayer_sp 1.0.5
- realnetworks realplayer_sp 1.1
- realnetworks realplayer_sp 1.1.1