Info

Disclosure

Nov 15, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Nov 15, 2005

Description

Classification

Location: Local Access Required
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Private
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, RealNetworks has released a patch to address this vulnerability. Consult the product matrix for further details.

Products

Unknown or Incomplete

References

Security Tracker: 1015223
Bugtraq ID: 15448
Secunia Advisory ID: 19358 19362
CVE ID: 2005-2936 (see also: NVD)
Related OSVDB ID: 24061 24062 24063
VUPEN Advisory: ADV-2006-1057
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0491.html
Vendor Specific News/Changelog Entry: http://service.real.com/help/faq/security/security111605.html
http://www.service.real.com/realplayer/security/03162006_player/en/
Vendor Specific Advisory URL: http://service.real.com/realplayer/security/03162006_player/en/
http://service.real.com/realplayer/security/security/enterprise_031606.html
Other Advisory URL: http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities
http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities
RedHat RHSA: RHSA-2006:0257

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/21010