Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-1309

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory.

Published

2008-03-12T17:44:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-399

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	realnetworks	realplayer	*	Yes
Application	realnetworks	realplayer	10.0	Yes
Application	realnetworks	realplayer	10.5	Yes
Application	realnetworks	realplayer	11	Yes

References

http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html ([email protected])
http://secunia.com/advisories/29315 Vendor Advisory ([email protected])
http://service.real.com/realplayer/security/07252008_player/en/ Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/831457 US Government Resource ([email protected])
http://www.securityfocus.com/archive/1/494779/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/28157 Exploit ([email protected])
http://www.securitytracker.com/id?1019576 ([email protected])
http://www.securitytracker.com/id?1020563 ([email protected])
http://www.vupen.com/english/advisories/2008/0842 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/2194/references Vendor Advisory ([email protected])
http://www.zerodayinitiative.com/advisories/ZDI-08-047/ ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41087 ([email protected])
https://www.exploit-db.com/exploits/5332 ([email protected])
http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29315 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://service.real.com/realplayer/security/07252008_player/en/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/831457 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/494779/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/28157 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019576 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1020563 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0842 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/2194/references Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.zerodayinitiative.com/advisories/ZDI-08-047/ (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41087 (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/5332 (af854a3a-2127-422b-91ae-364da2661108)