Reported October 01, 2004, by eEye
Digital Security
VERSIONS AFFECTED
- RealPlayer 10.5
(6.0.12.1040 and earlier)
- RealPlayer 10
- RealPlayer 8 (Local
Playback)
- RealOne Player V2, V1
|
DESCRIPTION
A vulnerability in RealPlayer could let a remote attacker reliably overwrite
heap memory with arbitrary data and execute arbitrary code within the user
security context. This specific flaw exists within the pnen3260.dll file that RealPlayer
uses. By specially crafting a malformed .rm movie file along with a Synchronized
Multimedia Integration Language (SMIL) file, a direct heap overwrite is
triggered and reliable code execution is then possible.
VENDOR RESPONSE
RealNetworks has released has released a patch for this
vulnerability, which is also available via the Updates section of the affected
application.
CREDIT
Discovered by eEye Digital Security.
