English
¢¸¢· µÚ·Î
Ãë¾àÁ¡ID 28212
À§Çèµµ 40
Æ÷Æ® 139,445
ÇÁ·ÎÅäÄÝ TCP
ºÐ·ù SMB
»ó¼¼¼³¸í ÇØ´ç È£½ºÆ®¿¡´Â 6.0.12.1662 ÀÌÀüÀÇ RealPlayer/HelixPlayerÀÇ ¾î¶² ¹öÀüÀÌ ¼³Ä¡µÇ¾î ÀÖ´Ù. RealOne / RealPlayer´Â Microsoft Windows Ç÷§Æûµé ±×¸®°í ´ëºÎºÐÀÇ Linux¿Í UnixÀ» À§ÇÑ ÀÎÅÍ³Ý ¹Ìµð¾î Àü¼Û¿ëÀ¸·Î ¸Å¿ì ±¤¹üÀ§ÇÏ°Ô »ç¿ëµÇ´Â Á¦Ç°µé ÁßÀÇ ÇϳªÀÌ´Ù. RealNetworks RealPlayer / RealOne Player / RealPlayer Enterprise ¹öÀüµéÀº ´ÙÁßÀÇ ¹öÆÛ ¿À¹öÇ÷οì Ãë¾àÁ¡µé¿¡ Ãë¾àÇÏ´Ù. Àß Á¶ÀÛµÈ ¹Ìµð¾î ÆÄÀÏ(¿¹¸¦µé¾î, '.mp3', '.rm', '.SMIL', '.swf', '.ram', ȤÀº '.pls')À» º¸³» »ç¿ëÀÚ°¡ ±× ÆÄÀÏÀ» ¿­¾î º¸°Ô²û À¯µµÇÔÀ¸·Î½á, °ø°ÝÀÚ´Â ¹öÆÛ¸¦ ¿À¹öÇ÷οì½ÃÅ°°í ¿µÇâÀ» ¹Þ´Â ¾îÇø®ÄÉÀ̼ÇÀÌ ÀÛµ¿ÇÏ´Â »ç¿ëÀÚ ±ÇÇÑÀ» °¡Áö°í ½Ã½ºÅÛ »ó¿¡ ÀÓÀÇÀÇ Äڵ带 ½ÇÇà½Ãų ¼ö ÀÖ´Ù.

* ¾Ë¸²: ÀÌ Á¡°ËÇ׸ñÀº Á¡°ËÇϱâ À§ÇÑ ¿ø°ÝÁö È£½ºÆ®ÀÇ ·¹Áö½ºÆ®¸®¸¦ ¾×¼¼½ºÇÒ ¼ö ÀÖ´Â Guest ȤÀº ±× ÀÌ»óÀÇ ±ÇÇÑÀ» °¡Áø °èÁ¤À» ÇÊ¿ä·Î ÇÑ´Ù. ÀÌ·¯ÇÑ Á¶°ÇÀÌ ¾ÈµÇ¸é Á¡°ËÀ» ¼öÇàÇÒ ¼ö ¾øÀ¸¸ç ¸ðµç Ãë¾àÇÑ È£½ºÆ®µé¿¡ ´ëÇؼ­ °ÅÁþ À½¼º¹ÝÀÀ(False Negative)À» º¸ÀÏ ¼ö ÀÖ´Ù.

* Âü°í »çÀÌÆ®:
http://service.real.com/realplayer/security/10252007_player/en/
http://www.securityfocus.com/archive/1/482855/30/0/threaded
http://www.securityfocus.com/archive/1/482856/30/0/threaded
http://www.securityfocus.com/archive/1/482942/30/0/threaded
http://www.kb.cert.org/vuls/id/770904
http://securitytracker.com/alerts/2007/Jun/1018297.html
http://securitytracker.com/alerts/2007/Jun/1018299.html
http://securitytracker.com/alerts/2007/Oct/1018866.html
http://secunia.com/advisories/25819
http://secunia.com/advisories/27361

* ¿µÇâÀ» ¹Þ´Â Ç÷§Æû:
RealNetworks, RealOne Player v1, v2
RealNetworks, RealPlayer 10
RealNetworks, RealPlayer 8
RealNetworks, RealPlayer 10.5 (6.0.12.1662 ÀÌÀüÀÇ 6.0.x)
RealNetworks, RealPlayer Enterprise Any version
RealNetworks, Helix Player 10.0.5 - 10.0.8
Microsoft Windows Any version
Linux Any version
Apple Mac OS Any version
ÇØ°áÃ¥ RealPlayerÀÇ °æ¿ì:
RealNetwork À¥ »çÀÌÆ®ÀÎ http://www.real.com/realplayer.html ¿¡¼­ ±¸ÇÒ ¼ö ÀÖ´Â RealPlayerÀÇ °¡Àå ÃֽŠ¹öÀüÀ¸·Î ¾÷±×·¹À̵å ÇÏ¿©¾ß ÇÑ´Ù.

Helix PlayerÀÇ °æ¿ì:
´ÙÀ½ Helix Player Community ´Ù¿î·Îµå À¥ ÆäÀÌÁö·ÎºÎÅÍ ±¸ÇÒ ¼ö ÀÖ´Â ÀÌ Ãë¾àÁ¡À» À§ÇÑ ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÏ¿©¾ß ÇÑ´Ù:
https://player.helixcommunity.org/downloads/

±âŸ:
ÇØ´ç Á¦Á¶¾÷ü¿¡ ¹®ÀÇÇÏ¿© ¾÷±×·¹À̵峪 ÆÐÄ¡ Á¤º¸¿¡ ´ëÇØ ¾Ë¾Æº»´Ù.
°ü·Ã URL CVE-2007-2263,CVE-2007-2264,CVE-2007-3410,CVE-2007-4599,CVE-2007-5080,CVE-2007-5081 (CVE)
°ü·Ã URL 24658,26214,26284 (SecurityFocus)
°ü·Ã URL 35088,37434,37435,37436,37437,37438 (ISS)