OSVDB ID: 10418 Title: RealNetworks Multiple Products Malformed HTML Call Arbitrary Code Execution |
Info |
|
|
Dates |
||||
|
|
Description |
RealNetworks contains a flaw that may allow a malicious user to fashion a web page with malformed calls, corrupting the embedded Player. The issue is triggered when a user visits the attackers web site. It is possible that the flaw may allow arbitrary code Execution on a user's machine resulting in a loss of confidentiality and/or integrity. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unavailable Disclosure: OSVDB Verified |
Solution |
Upgrade to version RealPlayer 10.5 (Gold) or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
eeye.com - eEye Digital Security