FrSIRT is reporting a zero day exploit against client side Realplayer and Helix Player. This exploit takes advantage of a format string error which can be exploit by using specially crafted ".rp" (relpix) or ".rt" (realtext) files. The affected versions are
Helix Player 1.0.5 Gold and prior (Linux) RealPlayer 10.0.5 Gold and prior (Linux) There is no known fix at this time. http://service.real.com/help/faq/security/ has not posted information on this yet. Blake Hartstein from demarc.com posted the following to Bleeding-Snort yesterday which should provideStay tuned for further updates as we have them. |
Lorna 165 Posts ISC Handler Sep 27th 2005 |
Thread locked Subscribe |
Sep 27th 2005 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!