topic Re: RealNetworks RealPlayer MPG Width Integer Underflow Vulnerability - 91059 in Next-Generation Firewall Discussions

RealNetworks RealPlayer MPG Width Integer Underflow Vulnerability - 91059

Sahil_Arora — Tue, 10 Jun 2025 16:46:39 GMT

Hi Community,

A MPEG file trying to sync on One Drive but is being blocked by Palo Alto.

Here is the signature RealNetworks RealPlayer MPG Width Integer Underflow Vulnerability - 91059 being the reason. File is legit, what could be the reason of the block? The signature itself is based on an old CVE which has been resolved.

Re: RealNetworks RealPlayer MPG Width Integer Underflow Vulnerability - 91059

OtakarKlier — Wed, 11 Jun 2025 18:58:46 GMT

Hello,

Most likely there is a part of the file that is matching the vulnerability signature. You can open a TAC case to see if they will change the signature. Or you can create a new security policy with a special vulnerability policy that ignores this specific vulnerability.

Regards,