Family: Windows --> Category: infos
RealPlayer Skin File Remote Buffer Overflow Vulnerability Scan
Vulnerability Scan Summary
Acertains the version of RealPlayer
Detailed Explanation for this Vulnerability Test
The remote Windows application is affected by a remote buffer
According to its version number, the installed version of RealPlayer /
RealOne Player for Windows may allow a possible hacker to execute arbitrary
code on the remote host, with the rights of the user running
RealPlayer because of an overflow vulnerability in the third-party
compression library 'DUNZIP32.DLL'.
To do so, a possible hacker would need to send a corrupted skin file (.RJS)
to a remote user and have him open it using RealPlayer.
See also :
Upgrade according to the vendor advisories referenced above.
High / CVSS Base Score : 7
Click HERE for more information and discussions on this network vulnerability scan.