Heap overflow

2010-10-1900:00:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.8%

JSON

rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly validate file contents that are used during interaction with a heap buffer, which allows remote attackers to execute arbitrary code via crafted Name Value Property (NVP) elements in logical streams in a media file.

CPENameOperatorVersion
realplayereq11.0
realplayereq11.0.4
realplayereq11.0.2
realplayereq11.0.3
realplayereq11.0.5
realplayereq11.1
realplayereq11.0.1
realplayereq2.1.2 enterprise
realplayer_speq1.0.1
realplayer_speq1.1.3

Name	Operator	Version
realplayer	eq	11.0
realplayer	eq	11.0.4
realplayer	eq	11.0.2
realplayer	eq	11.0.3
realplayer	eq	11.0.5
realplayer	eq	11.1
realplayer	eq	11.0.1
realplayer	eq	2.1.2 enterprise
realplayer_sp	eq	1.0.1
realplayer_sp	eq	1.1.3