Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file.

According to its version number, the installed version of RealPlayer / RealPlayer Enterprise on the remote Windows host suffers from possibly several issues :

  - Heap memory corruption issues in several ActiveX controls can lead to arbitrary code execution (CVE-2008-1309).
  - An unspecified local resource reference vulnerability (CVE-2008-3064).
  - An SWF file heap-based buffer overflow (CVE-2007-5400).
  - A buffer overflow involving the 'import()' method in an ActiveX control implemented by the 'rjbdll.dll' module could result in arbitrary code execution (CVE-2008-3066).

Note that RealPlayer 11 (builds 6.0.14.738 - 6.0.14.802) are only affected by the first issue (CVE-2008-1309).
Note that the vendor's advisory states that version numbers for RealPlayer 10.5 are not sequential.

According to its build number, the installed version of RealPlayer / on the remote Windows host suffers from possibly several issues :

  - Heap memory corruption issues in several ActiveX     controls can lead to arbitrary code execution.
    (CVE-2008-1309)

  - An unspecified local resource reference vulnerability.
    (CVE-2008-3064)

  - An SWF file heap-based buffer overflow. (CVE-2007-5400)

  - A buffer overflow involving the 'import()' method in an     ActiveX control implemented by the 'rjbdll.dll' module     could result in arbitrary code execution.
    (CVE-2008-3066)

Note that RealPlayer 11 (builds 6.0.14.738 - 6.0.14.802) are only affected by the first issue (CVE-2008-1309).

ID	Name	Product	Family	Severity
4608	RealPlayer for Windows < 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
33744	RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2008-3066

high

Tenable Plugins

medium

high