RealNetworks RealOne Player/RealPlayer SMIL File Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	12698
Class:	Boundary Condition Error
CVE:	CVE-2005-0455
Remote:	Yes
Local:	No
Published:	Mar 01 2005 12:00AM
Updated:	Jul 12 2009 10:56AM
Credit:	Discovery is credited to an anonymous researcher.
Vulnerable:	Red Hat Fedora Core3 Real Networks RealPlayer For Unix 10.0.3 + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 Real Networks RealPlayer Enterprise 1.6 Real Networks RealPlayer Enterprise 1.5 Real Networks RealPlayer Enterprise 1.2 Real Networks RealPlayer Enterprise 1.1 Real Networks RealPlayer Enterprise Real Networks RealPlayer 10 for Mac OS Real Networks RealPlayer 10 for Linux Real Networks RealPlayer 10.5 v6.0.12.1056 Real Networks RealPlayer 10.5 v6.0.12.1053 Real Networks RealPlayer 10.5 v6.0.12.1040 Real Networks RealPlayer 10.0 + S.u.S.E. cvsup-16.1h-43.i586.rpm + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 Real Networks RealPlayer 8.0 Win32 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 SP1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows XP Home - Microsoft Windows XP Professional Real Networks RealOne Player for OSX 9.0 .297 Real Networks RealOne Player for OSX 9.0 .288 Real Networks RealOne Player 6.0.11 .872 Real Networks RealOne Player 6.0.11 .868 Real Networks RealOne Player 6.0.11 .853 Real Networks RealOne Player 6.0.11 .841 Real Networks RealOne Player 6.0.11 .840 Real Networks RealOne Player 6.0.11 .830 Real Networks RealOne Player 6.0.11 .818 Real Networks RealOne Player 1.0 Real Networks Helix Player for Linux 1.0

Not Vulnerable:	Real Networks RealPlayer 10 for Mac OS 10.0 .0.331 Real Networks RealPlayer 10.5 v6.0.12.1059