Real Networks RealPlayer(CVE-2011-2953) ActiveX控件越界远程代码执行漏洞

Bugtraq ID: 49200
CVE ID：CVE-2011-2953

RealNetworks RealPlayer是一款流行的媒体播放程序

RealNetworks RealPlayer ActiveX控件存在一个越界安全漏洞，攻击者构建恶意WEB页，诱使用户解析，可以应用程序上下文执行任意代码。目前没有详细漏洞细节提供
0
Real Networks RealPlayer SP 1.0.5
Real Networks RealPlayer SP 1.0.2
Real Networks RealPlayer SP 1.0.1
Real Networks RealPlayer SP 1.0
Real Networks RealPlayer Enterprise 2.1.3
Real Networks RealPlayer Enterprise 2.1.2
Real Networks RealPlayer Enterprise 2.1.5
Real Networks RealPlayer Enterprise 2.1.4
Real Networks RealPlayer Enterprise 2.0
Real Networks RealPlayer 12 for Mac OS 12.0.0.1569
Real Networks RealPlayer 14.0.2 633
Real Networks RealPlayer 11.0.5
Real Networks RealPlayer 11.0.4
Real Networks RealPlayer 11.0.3
Real Networks RealPlayer 11.0.2
Real Networks RealPlayer 11.0.1
Real Networks RealPlayer 14.0.5
Real Networks RealPlayer 14.0.3
Real Networks RealPlayer 14.0.2
Real Networks RealPlayer 14.0.1.633
Real Networks RealPlayer 14.0.1.609
Real Networks RealPlayer 14.0.1
Real Networks RealPlayer 14.0.0
Real Networks RealPlayer 11.1
Real Networks RealPlayer 11.0.2.2315
Real Networks RealPlayer 11.0.2.1744
厂商解决方案

用户可参考如下供应商提供的安全公告获得补丁信息：
http://service.real.com/realplayer/security/08162011_player/en/