RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities

NASLDB: RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities

General

ID: 50022
Name: RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities

Summary: Checks RealPlayer Enterprise build number

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: –

Port: –
Family: Windows
Type: Local

Description

According to its build number, the installed version of RealPlayer on
the remote Windows host has multiple buffer overflow vulnerabilities :

– A ‘QCP’ parsing heap-based buffer overflow vulnerability
exists. (CVE-2010-2578)

– An uninitialized pointer vulnerability exists in the
CDDA URI ActiveX control. (CVE-2010-3747)

– A stack overflow vulnerability exists in the RichFX
component. (CVE-2010-3748)

– A parameter injection vulnerability exists in the
RecordClip browser extension. (CVE-2010-3749)

– A remote code execution vulnerability exists in
RJMDSections. (CVE-2010-3750)