Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue
function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and
possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player
10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute
arbitrary code via an SMIL (SMIL2) file with a long wallclock value.
Author | Note |
---|---|
kees | http://service.real.com/realplayer/security/10252007_player/en/ “Issue 3” |