Vulnerability CVE-2011-2947 - CERT Civis.Net

Vulnerability Name:

CVE-2011-2947 (CCN-69265)

Assigned:

2011-08-16

Published:

2011-08-16

Updated:

2011-10-06

Summary:

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2011-2947

Source: CCN
Type: SA44014
RealPlayer Multiple Vulnerabilities

Source: CCN
Type: RealNetworks August 2011 Update
RealNetworks, Inc. Releases Update to Address Security Vulnerabilities

Source: CONFIRM
Type: Vendor Advisory
http://service.real.com/realplayer/security/08162011_player/en/

Source: CCN
Type: OSVDB ID: 74546
RealPlayer Local HTML File Cross-Zone Scripting Remote Code Execution (2011-2947)

Source: CCN
Type: OSVDB ID: 76074
RealPlayer Local HTML File Cross-Zone Scripting Remote Code Execution (2011-1221)

Source: CCN
Type: BID-49178
Real Networks RealPlayer (CVE-2011-2947) Cross-Zone Scripting Vulnerability

Source: SECTRACK
Type: UNKNOWN
1025943

Source: MISC
Type: UNKNOWN
http://zerodayinitiative.com/advisories/ZDI-11-269/

Source: XF
Type: UNKNOWN
realplayer-html-code-execution(69265)

Source: CCN
Type: ZDI-11-269
RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution Vulnerability

Vulnerable Configuration:

Configuration 1:

cpe:/a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:14.0.1:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:14.0.2:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:14.0.3:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:14.0.4:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:14.0.5:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer_sp:1.1.5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:realnetworks:realplayer:14.0.0:*:*:*:*:*:*:*

OR cpe:/a:realnetworks:realplayer:14.0.5:*:*:*:*:*:*:*

Denotes that component is vulnerable