vendor:
RealOne Player
by:
Jon Hart
7.5
CVSS
HIGH
Privilege Escalation
CWE
Product Name: RealOne Player
Affected Version From: RealOne Player version 9
Affected Version To: RealOne Player version 9
Patch Exists: NO
Related CWE:
CPE: a:real:realplayer:9
Platforms Tested: Unknown
Unknown
Local Privilege Escalation in RealOne Player
The configuration files for the RealOne Player are installed in a hidden folder in a user's home directory. These configuration files have insecure permissions, allowing an attacker in the same group as the target user to modify the files and escalate privileges to that of the target user. The exploit involves modifying the path to shared libraries and writing malicious shared libraries.
Mitigation:
Ensure that configuration files for RealOne Player have secure permissions and are not accessible to unauthorized users. Regularly update RealOne Player to the latest version to patch any vulnerabilities.
