RealPlayer Unspecified Flaw Lets Remote Users Execute Arbitrary Code
Results 1 to 3 of 3

Thread: RealPlayer Unspecified Flaw Lets Remote Users Execute Arbitrary Code

  1. #1
    King Arana: Super Moderator
    Join Date
    Oct 2002
    Posts
    4,055

    RealPlayer Unspecified Flaw Lets Remote Users Execute Arbitrary Code

    From Zone H.org:
    08/13/2004

    Date: Aug 12 2004

    Impact: Execution of arbitrary code via network, User access via network

    Advisory: eEye Digital Security

    Description: A vulnerability was reported in RealPlayer. A remote user can execute arbitrary code.

    eEye Digital Security reported that a remote user can cause arbitrary code to be executed on the target user's system with the privileges of the target user. The specific nature of the vulnerability was not reported.

    Default installations are affected, the report said.

    The vendor was notified on August 9, 2004.

    The original notice is available at:

    http://www.eeye.com/html/research/up.../20040811.html

    Impact: A remote user can execute arbitrary code on the target system with the privileges of the target user.

    Solution: No solution was available at the time of this entry.

    Vendor URL: www.real.com/

    Cause: Not specified
    And here's some more information.
    Space For Rent.. =]

  2. #2
    They call me the Hunted foxyloxley's Avatar
    Join Date
    Nov 2003
    Location
    3rd Rock from Sun
    Posts
    2,528
    Oh that's just great..........
    I get ONE piece of S/W I can really work with, and it gets this...........

    As an aside. Is there any way of knowing how long they take to sort out, and release the update ?

    And is the S/W at risk if you have your security set up running ? As opposed to Joe Public, who wouldn't know security if it bit them on the ass..........
    55 - I'm fiftyfeckinfive and STILL no wiser,
    OLDER yes
    Beware of Geeks bearing GIF's
    come and waste the day :P at The Taz Zone

  3. #3
    King Arana: Super Moderator
    Join Date
    Oct 2002
    Posts
    4,055
    The update I'm not too sure about nor really that last question. However, I don't think it's really at-risk that much if you have your security setup running. Like you said, opposed to Joe Public (my name's Joe, but not Public ) who wouldn't have security and would probably have the flaw and the risk at a higher level.
    Space For Rent.. =]

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides