FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-0323

This CVE name corresponds to:

Entered	Topic
2006-03-27	linux-realplayer -- buffer overrun

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-0323 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-0323
Phase	Assigned(20060119)

Description

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

References

Source	Reference
BUGTRAQ	20060411 Realplayer .SWF Multiple Remote Memory Corruption Vulnerabilities
CONFIRM	http://www.service.real.com/realplayer/security/03162006_player/en/
GENTOO	GLSA-200603-24
REDHAT	RHSA-2006:0257
SUSE	SUSE-SA:2006:018
CERT-VN	VU#231028
BID	17202
VUPEN	ADV-2006-1057
SECTRACK	1015806
SECUNIA	19358
SECUNIA	19365
SECUNIA	19390
SECUNIA	19362
SREASON	690
XF	realnetworks-swf-bo(25408)