Description
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
References
- 4977 vdb-entry
- http://www.service.real.com/help/faq/security/040406_r3t/en/
- 20040307 REAL One Player R3T File Format Stack Overflow mailing-list
- realplayer-r3t-bo(15774) vdb-entry
- 20040307 REAL One Player R3T File Format Stack Overflow mailing-list
- 11314 third-party-advisory
- http://www.ngssoftware.com/advisories/realr3t.txt
- 10070 vdb-entry