Description
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.
References
- ADV-2010-2216 vdb-entry
- 41096 third-party-advisory
- realplayer-qcp-bo(61420) vdb-entry
- oval:org.mitre.oval:def:7326 vdb-entry signature
- http://service.real.com/realplayer/security/08262010_player/en/
- 1024370 vdb-entry
- 41154 third-party-advisory
- http://secunia.com/secunia_research/2010-3/