KLA10305 ACE vulnerabilities in RealPage Module Upload

A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file.

Original advisories

Related products

RealPage-Module-(Realpage.dll)-ActiveX-Controls

CVE list

CVE-2010-2585 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• RealPage Module Upload ActiveX control version 10.0.0.9