OSVDB ID: 37374

Title: RealPlayer/Helix Player smlprstime.cpp SmilTimeValue::parseWallClockValue Function SMIL File Handling Overflow

Info

Disclosure

Jun 26, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public, Exploit Private, Exploit Commercial

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, RealNetworks has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1018297 1018299
CVE ID: 2007-3410 (see also: NVD)
Bugtraq ID: 24658
Secunia Advisory ID: 25819 25859 26463 26828
ISS X-Force ID: 35088
Milw0rm: 4118
Exploit Database: 4118
CERT VU: 770904
VUPEN Advisory: ADV-2007-2339
Other Advisory URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547
http://www.gentoo.org/security/en/glsa/glsa-200709-05.xml
Generic Exploit URL: http://www.saintcorporation.com/cgi-bin/exploit_info/realplayer_smil_wallclock
RedHat RHSA: RHSA-2007:0605 RHSA-2007:0841

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/37374