Thursday, September 2, 2010

RealNetworks RealPlayer: FLV Parsing Multiple Integer Overflow Vulnerabilities

Users of RealNetworks RealPlayer please be advised of a FLV Parsing Multiple Integer Overflow Vulnerabilities that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities
-- Affected Products:

RealNetworks RealPlayer


-- Vulnerability Details:

This vulnerability allows remote attackers to execute arbitrary code on

vulnerable installations of RealNetworks RealPlayer. Authentication is

not required to exploit this vulnerability.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment