CVE-2010-3747
RealPlayer 11.0-11.1 and RealPlayer SP 1.0-1.1.4 - Remote Code Execution via CDDA URI Parsing
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3747.
PoCs published by Metasploit, bannedit, sinn3r, including Metasploit module exploits/windows/browser/realplayer_cdda_uri.
AI-analyzed exploit summary This exploit leverages a memory initialization flaw in RealPlayer by crafting a maliciously long CDDA URI, leading to execution of uninitialized memory. It uses heap spraying and a ROP-like technique to achieve remote code execution.
Description
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI.
Exploits (2)
This exploit leverages a memory initialization flaw in RealPlayer by crafting a maliciously long CDDA URI, leading to execution of uninitialized memory. It uses heap spraying and a ROP-like technique to achieve remote code execution.
This Metasploit module exploits a memory initialization flaw in RealPlayer by triggering an abnormally long CDDA URI, leading to execution of uninitialized memory. It uses heap spraying and a malformed URI to achieve remote code execution.