Description
Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file.
References
- ADV-2010-2216 vdb-entry
- oval:org.mitre.oval:def:6703 vdb-entry signature
- realplayer-ivr-code-exec(61425) vdb-entry
- 20100826 ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability mailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-10-166
- http://service.real.com/realplayer/security/08262010_player/en/
- 1024370 vdb-entry
- 41154 third-party-advisory