Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.

Updated realplayer packages that fix a number of security issues are now available for Red Hat Enterprise Linux 3 Extras.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The realplayer package contains RealPlayer, a media format player.

A number of security issues have been discovered in RealPlayer 8 of which a subset are believed to affect the Linux version as shipped with Red Hat Enterprise Linux 3 Extras. RealPlayer 8 is no longer supported by RealNetworks.

Users of RealPlayer are advised to upgrade to this erratum package which contains RealPlayer 10.

The remote host is running a version of RealPlayer that is vulnerable to multiple undisclosed remote buffer overflows. 

According to its build number, the installed version of RealPlayer / RealOne Player for Windows may allow an attacker to execute arbitrary code and delete arbitrary files on the remote host.

ID	Name	Product	Family	Severity
17590	RHEL 3 : realplayer (RHSA-2005:299)	Nessus	Red Hat Local Security Checks	high
2344	RealPlayer Multiple Remote Overflows	Nessus Network Monitor	Web Clients	high
15395	RealPlayer Multiple Remote Vulnerabilities (2004-09-28)	Nessus	Windows	high

Detections

Analytics

CVE-2005-0189

critical

Tenable Plugins

high

high

high