Description
Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature.
References
- 56324 vdb-entry
- 20121026 Realplayer Watchfolders Long Filepath Overflow mailing-list
- http://www.reactionpenetrationtesting.co.uk/realplayer-watchfolders.html
- http://packetstormsecurity.org/files/117691/Realplayer-Watchfolders-Long-Filepath-Overflow.html
- realplayer-watch-folder-bo(79663) vdb-entry
- 86721 vdb-entry