| 
          
         | 
        
          
            <<  
             ^ 
              >>
          
          
            
              
                Date: 1998-07-06
                 
                 
                Der Real Player Killer
                
                 
-.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- 
                 
                
      crasht, wenn er vorgeht, wie unten angeführt, nicht nur den Real Player einer Maschine irgendwo am 
Netz.  Win95 und Linux/rechner sperren wegen CPU/Überfüllung hundertprozentig zu. 
 
* Real Player Killer - 6/26/98 * * (C) 1998 Kit Knox <kit@connectnet.com> * * [ 
http://www.rootshell.com/ ] * * Real Player 5.0 for Windows95 and Linux (others untested) do not 
check * the validity of incoming UDP packets used when receiving audio/video. * * If you are able to 
determine or brute force the destination port of the * stream you are able to crash the player and 
cause it to use 100% of * idle CPU.  I would not be surprised if there are numerous buffer * 
overflows in this area as well.  The client does not even check if the * source IP address is the 
one it is receiving data from.  Any source IP * can be used. * * Generally the stack will start with 
port 1025 and go up.  Starting there * and going up will generally give you good results.  If you 
are able to * sniff the network you will know the exact port and not have to guess. * */ 
 
Real Networks has been notified of the problem and has stated that they will make a fix for their 
upcoming G2 release and are considering making a patch available for all of the 5.0 players out 
there.  The only available workaround at this time is to force your player to use TCP instead of UDP 
for streams in the transport area of the preferences menu. 
 
relayed by 
http://www.rootshell.com/
                   
 
-.-.- --.-  -.-.- --.-  -.-.- --.- 
TIP 
Für tägliche Media/News (Print, TV, Net) mit Oesterreich/Bezug 
empfehlen wir, die oejc Liste zu sub/scribieren 
http://www.oejc.or.at/oejc/mailto/welcome.html
                   
-.-.- --.-  -.-.- --.-  -.-.- --.-
    
                 
- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- 
                
edited by Harkank 
published on: 1998-07-06 
comments to office@quintessenz.at
                   
                  
                    subscribe Newsletter
                  
                   
                
- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- 
                
                  <<  
                   ^ 
                    >> 
                
                
               | 
             
           
         | 
         | 
        
          
         |