RSS   Vulnerabilities for 'Rhapsody'   RSS

2006-03-23
 
CVE-2006-0323

CWE-119
 

 
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

 
2005-12-31
 
CVE-2005-2922

 

 
Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.

 

 >>> Vendor: Realnetworks 26 Products
Realserver g2
Realserver
Realsystem g2 server
Realplayer
Realone player
Realplayer intranet
Realjukebox 2
Realjukebox 2 plus
Helix universal server
Realone enterprise desktop
Realone desktop manager
Realsystem proxy
Realsystem server
Helix universal mobile server
Helix universal mobile server and gateway
Helix player
Realarcade
Rhapsody
Helix dna server
Helix mobile server
Helix server
Realplayer enterprise
Gamehouse
Helix server mobile
Realplayer sp
Realarcade installer


Copyright 2024, cxsecurity.com

 

Back to Top