ZDI-11-332 : RealNetworks RealPlayer Malformed AAC File Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-332 : RealNetworks RealPlayer Malformed AAC File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-332 November 28, 2011 - -- CVE ID: CVE-2011-4248 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

Apple iTunes AAC File Parsing Integer Overflow (uncredentialed check)

The version of Apple iTunes running on the remote host is affected by an integer overflow vulnerability when it parses specially crafted AAC files. By convincing a user to open such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user. C Tenable Netwo...

Integer overflow

Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...

CVE-2006-1467

Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...

CVE-2006-1467

Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...