Description
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.
References
- ADV-2010-2216 vdb-entry
- 41096 third-party-advisory
- oval:org.mitre.oval:def:6807 vdb-entry signature
- http://secunia.com/secunia_research/2010-8/
- realplayer-qcp-audio-bo(61422) vdb-entry
- http://service.real.com/realplayer/security/08262010_player/en/
- 1024370 vdb-entry
- 41154 third-party-advisory