CVE-2011-0694

RealNetworks RealPlayer (Windows) with versions 11.0–11.1.1.x/SP 1.0–1.1.5 and 14.0.0–14.0.1, plus Enterprise 2.0–2.1.4, is affected by CVE-2011-0694. The flaw is in the temporary-file naming scheme used to store references to Real Media files, which is easily predictable and can be brute-forced ...

ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability

ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-076 February 8, 2011 -- CVE ID: CVE-2011-0694 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: RealNetworks -- Affected Products:...