Description
Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist (PLS) file.
References
- http://www.zerodayinitiative.com/advisories/ZDI-07-062.html
- 20071031 ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability mailing-list
- http://service.real.com/realplayer/security/10252007_player/en/
- 1018866 vdb-entry
- realplayer-pls-bo(37438) vdb-entry
- 20071030 RealPlayer Updates of October 25, 2007 mailing-list
- ADV-2007-3628 vdb-entry
- 27361 third-party-advisory
- 38341 vdb-entry
- 26214 vdb-entry