----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,700 different Windows applications.

Request your account, the Secunia Network Software Inspector (NSI):
http://secunia.com/network_software_inspector/

----------------------------------------------------------------------

TITLE:
RealPlayer Playlist Handling Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA27248

VERIFY ADVISORY:
http://secunia.com/advisories/27248/

CRITICAL:
Extremely critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:

http://secunia.com/product//
RealPlayer 10.x
http://secunia.com/product/2968/
RealOne Player 1.x
http://secunia.com/product/666/
RealOne Player 2.x
http://secunia.com/product/2378/

DESCRIPTION:
A vulnerability has been discovered in RealPlayer, which can be
exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a signedness error in MPAMedia.dll
when handling playlist names. This can be exploited to cause a
stack-based buffer overflow by e.g. importing a file into a specified
playlist with an overly long name via the "Import()" method of the
IERPCtl ActiveX control (ierpplug.dll).

Successful exploitation allows execution of arbitrary code.

NOTE: The vulnerability is currently being actively exploited.

SOLUTION:
Apply patch for RealPlayer 10.5 and 11 beta:
http://service.real.com/realplayer/security/191007_player/en/securitydb.rnx

The vendor recommends users of RealPlayer 10 and RealOne v1 and v2 to
upgrade to version 10.5 and apply the patch.

NOTE: According to the vendor, RealPlayer 8 and prior versions for
Windows are not affected. Versions for Macintosh and Linux are also
not affected.

PROVIDED AND/OR DISCOVERED BY:
Reported as a 0-day.

ORIGINAL ADVISORY:
RealNetworks:
http://service.real.com/realplayer/security/191007_player/en/

OTHER REFERENCES:
US-CERT VU#871673:
http://www.kb.cert.org/vuls/id/871673

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------