what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Adam Muntner

winreal.6-7.txt

Posted Apr 6, 2000

Authored by Adam Muntner

There is a buffer overflow in the Win32 RealPlayer Basic client versions 6 and 7 which occurs when a long location to play string is entered. Using the HTML "EMBED" tag to embed RealPlayer in a webpage and setting the "AUTOSTART=true" flag, you can force RealPlayer to start automatically, triggering the overflow condition. It appears that arbitrary code could be exploited simply by *VISITING* a webpage with the malicious embedded RealPlayer tags. MacOS and linux versions appear not to be vulnerable.

tags | exploit, overflow, arbitrary

systems | linux, windows

SHA-256 | 37419905d1e37c015f0676d7c50395144408e6d018c7cd4c3400a0871bbd49fd

Download | Favorite | View