Description
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.
References
- http://service.real.com/realplayer/security/10252007_player/en/
- realplayer-mp3-bo(37434) vdb-entry
- 1018866 vdb-entry
- 20071030 RealPlayer Updates of October 25, 2007 mailing-list
- ADV-2007-3628 vdb-entry
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/
- VU#759385 third-party-advisory
- 27361 third-party-advisory
- 26214 vdb-entry