[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows

To: "full-disclosure@xxxxxxxxxxxxxxxxx" <full-disclosure@xxxxxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows
From: Elazar Broad <elazarb@xxxxxxxxxxxxx>
Date: Mon, 26 Nov 2007 11:00:03 -0500 (GMT-05:00)

Supposedly Real fixed the Import() method overflow in October, 
http://secunia.com/advisories/27248/, I guess not, or it is no longer 
exploitable(I haven't tested it). Anyhow, that still leaves the ones that 
Shinnai found among others, and the PlayerProperty() method that I posted 
yesterday. 

Elazar

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Prev by Date: [Full-disclosure] False advertisting and possible click fraud about n3td3v
Next by Date: Re: [Full-disclosure] oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Apple Mac OS X
Previous by thread: [Full-disclosure] RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows
Next by thread: [Full-disclosure] RichFX nprfxins.dll ActiveX Control Multiple Stack Overflows
Index(es):
- Date
- Thread