Flashsky

Name of the Vulnerable Software and Affected Versions: RealPlayer versions 6.0.12.1040 through 1069 RealOne Player versions 1 and 2 RealPlayer version 8 RealPlayer Enterprise (affected versions not specified) Description: The issue is related to a heap-based buffer overflow in the vidplin.dll component. This can be exploited by remote attackers through a specially crafted .avi file with a modified strf structure value, potentially allowing the execution of arbitrary code. Recommendations: For RealPlayer versions 6.0.12.1040 through 1069, update to a version outside of this range to resolve the issue. For RealOne Player versions 1 and 2, consider upgrading to a newer version of the player. For RealPlayer version 8, update to a newer version of RealPlayer. For RealPlayer Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows NT, Windows 2000 through SP4, Windows XP through SP2, Windows 2003 Description: A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted .hlp file. This issue is related to the winhlp32.exe component. Recommendations: For Windows NT, consider applying security patches or updates to address the issue. For Windows 2000 through SP4, apply the available security patch to fix the problem. For Windows XP through SP2, update to a newer service pack or apply a security patch. For Windows 2003, apply a security patch or update to resolve the issue. As a temporary workaround, consider restricting access to .hlp files or disabling the winhlp32.exe component until a patch is available.

Name of the Vulnerable Software and Affected Versions: Windows NT Windows 2000 through SP4 Windows XP through SP2 Windows 2003 Description: The issue is caused by an integer underflow in winhlp32.exe, allowing remote attackers to execute arbitrary code via a malformed .hlp file. This leads to a heap-based buffer overflow. Recommendations: For Windows NT, update to a version that includes the fix for this issue. For Windows 2000 through SP4, apply the necessary patch or update to resolve the issue. For Windows XP through SP2, update to a newer service pack or version that includes the fix. For Windows 2003, apply the necessary patch or update to resolve the issue.