Type confusion

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...

PT-2015-3546

Name of the Vulnerable Software and Affected Versions RealArcade Installer version 2.6.0.481 Description The issue concerns the RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll, which performs unexpected type conversions for invalid parameter types. This allows remote attackers to...

CVE-2013-2603: Undefined Security Weakness

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...

CVE-2013-2604: Undefined Security Weakness

RealNetworks GameHouse RealArcade Installer aka ActiveMARK Game Installer 2.6.0.481 and 3.0.7 uses weak permissions Create Files/Write Data for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated...

PT-2015-3547

Name of the Vulnerable Software and Affected Versions RealNetworks GameHouse RealArcade Installer versions 2.6.0.481 through 3.0.7 Description The issue concerns weak permissions set for the GameHouse Games directory tree, allowing local users to gain privileges. This can be achieved by placing a...