Description
Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.
References
- ADV-2010-0178 vdb-entry
- 1023489 vdb-entry
- http://service.real.com/realplayer/security/01192010_player/en/
- 38218 third-party-advisory
- 37880 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-10-008/
- realplayer-sipr-bo(55797) vdb-entry
- 20100121 ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerability mailing-list