Description
RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.
References
- 49193 third-party-advisory
- 1027076 vdb-entry
- http://service.real.com/realplayer/security/05152012_player/en/
- realplayer-asmrulebook-code-exec(75647) vdb-entry
- 81943 vdb-entry