RealNetworks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability
Gravità: : Critico
Identificatori CVE: CVE-2010-4376
Data notifica: 15 febbraio 2011
Descrizione
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.
Informazioni esposizione:
Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1004554
Trend Micro Deep Security DPI Rule Name: 1004554 - RealNetworks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability
Software e versione interessati:
- realnetworks realplayer 11.0
- realnetworks realplayer 11.0.1
- realnetworks realplayer 11.0.2
- realnetworks realplayer 11.0.2.1744
- realnetworks realplayer 11.0.3
- realnetworks realplayer 11.0.4
- realnetworks realplayer 11.0.5
- realnetworks realplayer 11.1
- realnetworks realplayer_sp 1.0.0
- realnetworks realplayer_sp 1.0.1
- realnetworks realplayer_sp 1.0.2
- realnetworks realplayer_sp 1.0.5
- realnetworks realplayer_sp 1.1
- realnetworks realplayer_sp 1.1.1