CVE-2000-0280: Buffer Overflow
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
RealPlayerfrom your environment.Uninstall RealPlayer from affected systems or remove the RealPlayer client until an official vendor patch/fix is available.
- Compensating control
At the network perimeter, block or filter media streams and HTTP responses that contain unusually long Location URLs and restrict access to streaming services to trusted sources to reduce exposure to remote Location-URL attacks.
- Operational
Advise users not to open untrusted media or follow unfamiliar Location URLs; monitor systems for RealPlayer crashes or denial-of-service behaviour and isolate/restart affected hosts while remediation is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0280?
CVE-2000-0280 has a high severity rating due to its potential to cause remote denial of service attacks.
How do I fix CVE-2000-0280?
To fix CVE-2000-0280, upgrade to a later version of RealPlayer that is not vulnerable to this buffer overflow.
What versions of RealPlayer are affected by CVE-2000-0280?
CVE-2000-0280 affects RealPlayer versions 6.0 and 7.0 on Windows.
Can CVE-2000-0280 be exploited remotely?
Yes, CVE-2000-0280 can be exploited remotely by attackers through a specially crafted long Location URL.
What impact does CVE-2000-0280 have on system security?
The impact of CVE-2000-0280 on system security includes potential crashes and denial of service for users of the affected RealPlayer versions.