Remote exploitation of a heap buffer overflow vulnerability in RealNetworks Inc.'s RealPlayer media player could allow attackers to execute arbitrary code in the context of the targeted user.
The vulnerability is due to the way RealPlayer handles specially crafted RealMedia files using the RealVideo Renderer plugin. A short value is read directly from a .ram media file. This value is used to calculate a length value which is passed to a memory copy operation as the size parameter. This can cause the memory copy operation to overflow the bounds of a fixed-sized heap buffer. This condition may lead to arbitrary code execution.
Vendor Status:
RealNetworks has released patches and workarounds to address this vulnerability.
