Real Networks RealPlayer Write Access Violation Arbitrary Code Execution Vulnerability

Bugtraq ID:	56113
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 18 2012 12:00AM
Updated:	Oct 18 2012 12:00AM
Credit:	kaveh ghaemmaghami
Vulnerable:
Not Vulnerable:

Real Networks RealPlayer Write Access Violation Arbitrary Code Execution Vulnerability

Real Networks RealPlayer is prone to an arbitrary code-execution vulnerability.

Successful exploits may allow an attacker to execute arbitrary code within the context of the user running the affected application.

RealPlayer 15.0.6.14 is vulnerable; other versions may also be affected.

Real Networks RealPlayer Write Access Violation Arbitrary Code Execution Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Real Networks RealPlayer Write Access Violation Arbitrary Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Real Networks RealPlayer Write Access Violation Arbitrary Code Execution Vulnerability

References:

• RealPlayer Homepage (Real Networks )