RealPlayer ActiveX control playlist name buffer overflow

Added: 10/25/2007
CVE: CVE-2007-5601
BID: 26130
OSVDB: 41430

Background

RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages.

Problem

The RealPlayer Database Component (MPAMedia.dll) is affected by a buffer overflow vulnerability when handling playlist names. This vulnerability can be exploited through the ierpplug.dll ActiveX control, allowing command execution when the user loads an attacker's web page.

Resolution

Apply the patch provided by RealNetworks.

References

http://www.kb.cert.org/vuls/id/871673

Limitations

Exploit works on RealNetworks RealPlayer 10-5 Gold 10.5-6.0.12.1662 and requires a user to load the exploit page in Internet Explorer.

Platforms

Windows XP

Back to exploit index