CVE-2008-1309
RealPlayer - Remote Code Execution via RealAudioObjects.RealAudio ActiveX Control
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-1309.
PoCs published by Metasploit, Elazar, including Metasploit module exploits/windows/browser/realplayer_console.
AI-analyzed exploit summary This exploit targets a heap corruption vulnerability in the RealPlayer ActiveX control (rmoc3260.dll) via the 'Console' property. It uses a crafted HTML page with JavaScript to trigger the vulnerability and execute arbitrary code.
Description
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory.
Exploits (3)
This exploit targets a heap corruption vulnerability in the RealPlayer ActiveX control (rmoc3260.dll) via the 'Console' property. It uses a crafted HTML page with JavaScript to trigger the vulnerability and execute arbitrary code.
This exploit targets a heap corruption vulnerability in Real Player's rmoc3260.dll ActiveX control (CVE-2008-1309). It uses a heap spray technique to achieve remote code execution by overwriting the 'Console' property of the ActiveX object with malicious shellcode.
This Metasploit module exploits a heap corruption vulnerability in the RealPlayer ActiveX control (rmoc3260.dll) via a crafted string to the 'Console' property, leading to arbitrary code execution. It uses JavaScript to manipulate memory and trigger the vulnerability.