Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2009-4242

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

RealNetworks RealNetworks RealPlayer是美国RealNetworks公司开发的一套媒体播放器产品。该产品提供下载/转换视频（在网页中）、编辑视频、管理媒体文件等功能。 RealNetworks RealPlayer的datatype/image/gif/common/gifcodec.cpp中的CGIFCodec::GetPacketBuffer函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可借助带有特制块尺寸的可触发内存分配的GIF文件执行任意代码。 该临时位于以下版本中

AI Predicted 9.8 Difficulty: Easy EPSS 8.45% · P95
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-4242

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
RealNetworks RealPlayer GIF文件堆缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RealNetworks RealNetworks RealPlayer是美国RealNetworks公司开发的一套媒体播放器产品。该产品提供下载/转换视频（在网页中）、编辑视频、管理媒体文件等功能。 RealNetworks RealPlayer的datatype/image/gif/common/gifcodec.cpp中的CGIFCodec::GetPacketBuffer函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可借助带有特制块尺寸的可触发内存分配的GIF文件执行任意代码。 该临时位于以下版本中
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2009-4242

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4242

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-4242 (11)

Mailing List Discussions for CVE-2009-4242 (1)

Other References for CVE-2009-4242 (3)

Same Patch Batch · n/a · 2010-01-25 · 18 CVEs total

CVE-2009-4248 RealNetworks RealPlayer RTSP SET_PARAMETER请求缓冲区溢出漏洞
CVE-2010-0389 Sun Java System Web Server 7.0 Update 6版本中拒绝服务漏洞
CVE-2010-0388 Sun Java System Web Server WebDAV 格式字符串漏洞
CVE-2010-0387 Sun Java System Web Server Digest Authentication 远程缓冲区溢出漏洞
CVE-2010-0386 Sun Java System Application Server 7远程攻击信息泄露漏洞
CVE-2010-0385 Tor官方目录查询请求敏感信息泄露漏洞
CVE-2010-0384 Tor目录镜像功能客户身份泄露漏洞
CVE-2010-0383 Tor官方目录查询请求信息泄露漏洞
CVE-2009-4257 RealNetworks RealPlayer smlrender.dll SMIL文件堆缓冲区溢出漏洞
CVE-2005-4884 Oracle Database Server 10.1.0.4 (10g)远程攻击拒绝服务漏洞
CVE-2009-4247 RealNetworks RealPlayer ASM RuleBook栈缓冲区溢出漏洞
CVE-2009-4246 RealNetworks多个R产品畸形.RJS皮肤文件堆缓冲区溢出漏洞
CVE-2009-4245 RealNetworks RealPlayer GIF压缩文件堆缓冲区溢出漏洞
CVE-2009-4244 RealNetworks多个R产品堆缓冲区溢出漏洞
CVE-2009-4243 RealNetworks多个产品特制媒体文件 未明漏洞
CVE-2009-4241 RealNetworks RealPlayer ASM Rulebook缓冲区溢出漏洞
CVE-2008-7253 IBM Lotus Domino 服务器 网络服务器设置 信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4242

No comments yet

Leave a comment