RealPlayer is a media player application which can play back various multimedia file formats, including QCP audio files. The QCP file format is frequently used to provide ring tones and to record voice for cellular telephones.
A heap buffer overflow vulnerability exists in RealPlayer
**qcpfformat.dll** when handling
**fmt** chunks in QCP files.
Upgrade to the latest version of RealPlayer, as identified in August 2011 Real Player update.
Exploit works on RealNetworks RealPlayer 126.96.36.1993 on Microsoft Windows XP with KB959426. The target user must open the exploit page using Internet Explorer 8.