RealPlayer RealMedia Image Map Parsing Vulnerabilities

Last Update Date: 28 Jan 2011 Release Date: 16 Nov 2010 4722 Views

RISK: Medium Risk

A vulnerability has been identified in RealPlayer which could be exploited by remote attackers to compromise a vulnerable system. The vulnerabilities are caused due to integer truncation errors when parsing image maps in RealMedia (.rm) files. This can be exploited to cause heap-based buffer overflows via a specially crafted file.

Impact

Remote Code Execution

System / Technologies affected

RealPlayer SP 1.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Upgrade to version 14.0.1.609

Vulnerability Identifier

No CVE information is available

Source

Secunia