Description
Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.
References
- 20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e) mailing-list
- 20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e) mailing-list
- 12311 vdb-entry
- http://service.real.com/help/faq/security/040928_player/EN/
- 20041006 Patch available for multiple high risk vulnerabilities in RealPlayer mailing-list
- VU#698390 third-party-advisory