Description
Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file.
References
- 20080725 http://www.zerodayinitiative.com/advisories/ZDI-08-046 mailing-list
- ADV-2008-2194 vdb-entry
- VU#461187 third-party-advisory
- http://service.real.com/realplayer/security/07252008_player/en/
- 1020565 vdb-entry
- 30379 vdb-entry
- 30376 vdb-entry
- realplayer-rjbdll-activex-bo(44013) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-046/