AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?storyid=838
Last Updated: 2005-11-11 00:11:06 UTC
"RealNetworks has issued a critical patch for two vulnerabilities reported by eEye. The vulnerabilities affect a large number of RealNetworks' applications.
eEye RealPlayer Zipped Skin File Buffer Overflow II
"A RealPlayer skin file (.rjs extension) can be downloaded and applied automatically through a web browser without the user's permission."
eEye RealPlayer Data Packet Stack Overflow
"By specially crafting a malformed .rm movie file, a direct stack overwrite is triggered, and reliable code execution is then possible."
RealNetworks Update to Address Security Vulnerabilities:
- http://service.real.com/help/faq/security/051110_player/EN/
Updated November 10, 2005
- http://isc.sans.org/diary.php?storyid=838
Last Updated: 2005-11-11 00:11:06 UTC
"RealNetworks has issued a critical patch for two vulnerabilities reported by eEye. The vulnerabilities affect a large number of RealNetworks' applications.
eEye RealPlayer Zipped Skin File Buffer Overflow II
"A RealPlayer skin file (.rjs extension) can be downloaded and applied automatically through a web browser without the user's permission."
eEye RealPlayer Data Packet Stack Overflow
"By specially crafting a malformed .rm movie file, a direct stack overwrite is triggered, and reliable code execution is then possible."
RealNetworks Update to Address Security Vulnerabilities:
- http://service.real.com/help/faq/security/051110_player/EN/
Updated November 10, 2005