RealPlayer Multiple Memory Corruption and Denial of Service Vulnerabilities

Bugtraq ID:	55473
Class:	Design Error
CVE:	CVE-2012-2407 CVE-2012-2408 CVE-2012-2409 CVE-2012-2410 CVE-2012-3234
Remote:	Yes
Local:	No
Published:	Sep 10 2012 12:00AM
Updated:	Sep 10 2012 12:00AM
Credit:	Andrzej Dyjak
Vulnerable:	RealNetworks RealPlayer for Mac 12.0 RealNetworks RealPlayer 14.0.2 RealNetworks RealPlayer 11.0
Not Vulnerable:

RealPlayer Multiple Memory Corruption and Denial of Service Vulnerabilities

RealPlayer is prone to multiple memory-corruption vulnerabilities and a denial-of-service vulnerability.

Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Successful exploits will compromise the affected application, the underlying computer, or crash the affected application, causing denial-of-service conditions.

RealPlayer Multiple Memory Corruption and Denial of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RealPlayer Multiple Memory Corruption and Denial of Service Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

RealPlayer Multiple Memory Corruption and Denial of Service Vulnerabilities

References:

• RealPlayer Homepage (Real Networks)