CVE-2006-0323
RealNetworks RealPlayer RealOne Player Rhapsody and Helix Player - Buffer Overflow via Crafted SWF File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0323. PoCs published by Federico L. Bossi Bonin.
AI-analyzed exploit summary This Perl script generates a malicious SWF file that exploits a buffer overflow vulnerability in RealPlayer (CVE-2006-0323). The crafted file contains a header, a NOP sled, and a payload designed to trigger a segmentation fault in the `swfformat.so` plugin.
Description
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.
Exploits (2)
This Perl script generates a malicious SWF file that exploits a buffer overflow vulnerability in RealPlayer (CVE-2006-0323). The crafted file contains a header, a NOP sled, and a payload designed to trigger a segmentation fault in the `swfformat.so` plugin.
This Perl script generates a malicious SWF file that exploits a buffer overflow vulnerability in RealPlayer. The crafted file contains a header, a NOP sled, and an end header to trigger the overflow, potentially leading to arbitrary code execution.