Ãë¾àÁ¡ID |
28212 |
À§Çèµµ |
40 |
Æ÷Æ® |
139,445 |
ÇÁ·ÎÅäÄÝ |
TCP |
ºÐ·ù |
SMB |
»ó¼¼¼³¸í |
ÇØ´ç È£½ºÆ®¿¡´Â 6.0.12.1662 ÀÌÀüÀÇ RealPlayer/HelixPlayerÀÇ ¾î¶² ¹öÀüÀÌ ¼³Ä¡µÇ¾î ÀÖ´Ù. RealOne / RealPlayer´Â Microsoft Windows Ç÷§Æûµé ±×¸®°í ´ëºÎºÐÀÇ Linux¿Í UnixÀ» À§ÇÑ ÀÎÅÍ³Ý ¹Ìµð¾î Àü¼Û¿ëÀ¸·Î ¸Å¿ì ±¤¹üÀ§ÇÏ°Ô »ç¿ëµÇ´Â Á¦Ç°µé ÁßÀÇ ÇϳªÀÌ´Ù. RealNetworks RealPlayer / RealOne Player / RealPlayer Enterprise ¹öÀüµéÀº ´ÙÁßÀÇ ¹öÆÛ ¿À¹öÇ÷οì Ãë¾àÁ¡µé¿¡ Ãë¾àÇÏ´Ù. Àß Á¶ÀÛµÈ ¹Ìµð¾î ÆÄÀÏ(¿¹¸¦µé¾î, '.mp3', '.rm', '.SMIL', '.swf', '.ram', ȤÀº '.pls')À» º¸³» »ç¿ëÀÚ°¡ ±× ÆÄÀÏÀ» ¿¾î º¸°Ô²û À¯µµÇÔÀ¸·Î½á, °ø°ÝÀÚ´Â ¹öÆÛ¸¦ ¿À¹öÇ÷οì½ÃÅ°°í ¿µÇâÀ» ¹Þ´Â ¾îÇø®ÄÉÀ̼ÇÀÌ ÀÛµ¿ÇÏ´Â »ç¿ëÀÚ ±ÇÇÑÀ» °¡Áö°í ½Ã½ºÅÛ »ó¿¡ ÀÓÀÇÀÇ Äڵ带 ½ÇÇà½Ãų ¼ö ÀÖ´Ù.
* ¾Ë¸²: ÀÌ Á¡°ËÇ׸ñÀº Á¡°ËÇϱâ À§ÇÑ ¿ø°ÝÁö È£½ºÆ®ÀÇ ·¹Áö½ºÆ®¸®¸¦ ¾×¼¼½ºÇÒ ¼ö ÀÖ´Â Guest ȤÀº ±× ÀÌ»óÀÇ ±ÇÇÑÀ» °¡Áø °èÁ¤À» ÇÊ¿ä·Î ÇÑ´Ù. ÀÌ·¯ÇÑ Á¶°ÇÀÌ ¾ÈµÇ¸é Á¡°ËÀ» ¼öÇàÇÒ ¼ö ¾øÀ¸¸ç ¸ðµç Ãë¾àÇÑ È£½ºÆ®µé¿¡ ´ëÇؼ °ÅÁþ À½¼º¹ÝÀÀ(False Negative)À» º¸ÀÏ ¼ö ÀÖ´Ù.
* Âü°í »çÀÌÆ®: http://service.real.com/realplayer/security/10252007_player/en/ http://www.securityfocus.com/archive/1/482855/30/0/threaded http://www.securityfocus.com/archive/1/482856/30/0/threaded http://www.securityfocus.com/archive/1/482942/30/0/threaded http://www.kb.cert.org/vuls/id/770904 http://securitytracker.com/alerts/2007/Jun/1018297.html http://securitytracker.com/alerts/2007/Jun/1018299.html http://securitytracker.com/alerts/2007/Oct/1018866.html http://secunia.com/advisories/25819 http://secunia.com/advisories/27361
* ¿µÇâÀ» ¹Þ´Â Ç÷§Æû: RealNetworks, RealOne Player v1, v2 RealNetworks, RealPlayer 10 RealNetworks, RealPlayer 8 RealNetworks, RealPlayer 10.5 (6.0.12.1662 ÀÌÀüÀÇ 6.0.x) RealNetworks, RealPlayer Enterprise Any version RealNetworks, Helix Player 10.0.5 - 10.0.8 Microsoft Windows Any version Linux Any version Apple Mac OS Any version |
ÇØ°áÃ¥ |
RealPlayerÀÇ °æ¿ì: RealNetwork À¥ »çÀÌÆ®ÀÎ http://www.real.com/realplayer.html ¿¡¼ ±¸ÇÒ ¼ö ÀÖ´Â RealPlayerÀÇ °¡Àå ÃֽŠ¹öÀüÀ¸·Î ¾÷±×·¹À̵å ÇÏ¿©¾ß ÇÑ´Ù.
Helix PlayerÀÇ °æ¿ì: ´ÙÀ½ Helix Player Community ´Ù¿î·Îµå À¥ ÆäÀÌÁö·ÎºÎÅÍ ±¸ÇÒ ¼ö ÀÖ´Â ÀÌ Ãë¾àÁ¡À» À§ÇÑ ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÏ¿©¾ß ÇÑ´Ù: https://player.helixcommunity.org/downloads/
±âŸ: ÇØ´ç Á¦Á¶¾÷ü¿¡ ¹®ÀÇÇÏ¿© ¾÷±×·¹À̵峪 ÆÐÄ¡ Á¤º¸¿¡ ´ëÇØ ¾Ë¾Æº»´Ù. |
°ü·Ã URL |
CVE-2007-2263,CVE-2007-2264,CVE-2007-3410,CVE-2007-4599,CVE-2007-5080,CVE-2007-5081 (CVE) |
°ü·Ã URL |
24658,26214,26284 (SecurityFocus) |
°ü·Ã URL |
35088,37434,37435,37436,37437,37438 (ISS) |
|