CVE-2006-6172

Public Exploit

Description

Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 4.29% Top 15%

Vendor Advisory slackware.com Vendor Advisory gentoo.org Vendor Advisory novell.com Vendor Advisory gentoo.org Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory sourceforge.net

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/23512	third party advisory
http://secunia.com/advisories/25555	third party advisory
http://secunia.com/advisories/24336	third party advisory
http://secunia.com/advisories/24339	third party advisory
https://sourceforge.net/tracker/index.php?func=detail&aid=1603458&group_id=9655&atid=109655	exploit patch vendor advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842	vendor advisory
http://secunia.com/advisories/23242	third party advisory
http://security.gentoo.org/glsa/glsa-200612-02.xml	vendor advisory
http://sourceforge.net/project/shownotes.php?release_id=468432
http://secunia.com/advisories/23567	third party advisory
http://www.novell.com/linux/security/advisories/2006_28_sr.html	vendor advisory
http://security.gentoo.org/glsa/glsa-200702-11.xml	vendor advisory
http://www.ubuntu.com/usn/usn-392-1	vendor advisory
http://secunia.com/advisories/23249	third party advisory
http://secunia.com/advisories/23335	third party advisory
http://www.securityfocus.com/bid/21435	vdb entry
http://www.mplayerhq.hu/MPlayer/patches/asmrules_fix_20061231.diff
http://www.mandriva.com/security/advisories?name=MDKSA-2006:224	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:112	vendor advisory
http://secunia.com/advisories/23218	third party advisory
http://www.debian.org/security/2006/dsa-1244	vendor advisory
http://www.mplayerhq.hu/design7/news.html#vuln14
http://www.vupen.com/english/advisories/2006/4824	vdb entry
http://secunia.com/advisories/23301	third party advisory

Frequently Asked Questions

What is the severity of CVE-2006-6172?: CVE-2006-6172 has been scored as a high severity vulnerability.
How to fix CVE-2006-6172?: To fix CVE-2006-6172, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-6172 being actively exploited in the wild?: It is possible that CVE-2006-6172 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.