|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
A remote overflow exists in RealOne Player and RealPlayer (all language versions). The application fails to handle a long rtsp:// filename parameter resulting in a file format buffer overrun. With a specially crafted request, an attacker can cause code execution on the target machine running in the context of the logged on user resulting in a loss of confidentiality and integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Unknown
|
|
Solution |
Currently, there are no known workarounds to correct this issue. However, REAL has released a patch to address this vulnerability, which can be applied via the "Check for Update" feature.
|
|
Products |
|
RealOne Player
 |
2 |
RealPlayer
|
10 Beta |
8 |
Enterprise Desktop
|
All Versions |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
