ZDI-11-338 : RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-338 : RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-338 November 28, 2011 - -- CVE ID: CVE-2011-4258 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnnov11win.nasl 7052 2017-09-04 11:50:51Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 Windows Authors: Madhuri D Copyright: Copyright c...

CVE-2011-4258

RealNetworks RealPlayer prior to 15.0.0 is affected by CVE-2011-4258 due to improper parsing of an IVR MLTI chunk length, allowing remote code execution. Exploitation typically requires user interaction (visit a malicious page or open a crafted file). Vendor advisory indicates the flaw is in the ...