CVE-2011-0694

RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function.

RealNetworks RealPlayer v11.0 hasta v11.1, SP v1.0 hasta v1.1.5, y v14.0.0 hasta v14.0.1, y Enterprise v2.0 hasta v2.1.4,utiliza nombres predecibles para los archivos temporales, lo que permite a atacantes remotos realizar ataques de secuencias de comandos entre dominios y ejecutar código arbitrario a través de la función OpenURLinPlayerBrowser.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The flaw exists within the temporary file naming scheme used for storage of references to Real Media files. This easily predictable temporary filename can be brute forced and used in combination with the OpenURLinPlayerBrowser function available in classid:FDC7A535-4070-4B92-A0EA-D9994BCC0DC5 to execute the file. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.

*Credits: Eduardo

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-01-31 CVE Reserved
2011-02-08 CVE Published
2024-08-06 CVE Updated
2024-10-14 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (8)

URL	Tag	Source
http://osvdb.org/70849	Vdb Entry
http://securityreason.com/securityalert/8098	Third Party Advisory
http://www.securityfocus.com/archive/1/516318/100/0/threaded	Mailing List
http://www.securitytracker.com/id?1025058	Vdb Entry
http://www.zerodayinitiative.com/advisories/ZDI-11-076	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://docs.real.com/docs/security/SecurityUpdate020811RPE.pdf	2018-10-09
http://secunia.com/advisories/43268	2018-10-09
http://service.real.com/realplayer/security/02082011_player/en	2018-10-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				11.0 Search vendor "Realnetworks" for product "Realplayer" and version "11.0"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				11.1 Search vendor "Realnetworks" for product "Realplayer" and version "11.1"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				14.0.0 Search vendor "Realnetworks" for product "Realplayer" and version "14.0.0"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				14.0.1 Search vendor "Realnetworks" for product "Realplayer" and version "14.0.1"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.0.0 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.0.0"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.0.1 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.0.1"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.0.2 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.0.2"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.0.5 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.0.5"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.1 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.1"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.1.1 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.1.1"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.1.2 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.1.2"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.1.3 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.1.3"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.1.4 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.1.4"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Sp Search vendor "Realnetworks" for product "Realplayer Sp"				1.1.5 Search vendor "Realnetworks" for product "Realplayer Sp" and version "1.1.5"		-		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				2.0 Search vendor "Realnetworks" for product "Realplayer" and version "2.0"		enterprise		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				2.1 Search vendor "Realnetworks" for product "Realplayer" and version "2.1"		enterprise		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				2.1.2 Search vendor "Realnetworks" for product "Realplayer" and version "2.1.2"		enterprise		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				2.1.3 Search vendor "Realnetworks" for product "Realplayer" and version "2.1.3"		enterprise		Affected
Realnetworks Search vendor "Realnetworks"		Realplayer Search vendor "Realnetworks" for product "Realplayer"				2.1.4 Search vendor "Realnetworks" for product "Realplayer" and version "2.1.4"		enterprise		Affected