Vulnerability Note VU#461187
RealPlayer file deletion overflow vulnerability
RealPlayer contains a buffer overflow vulnerability that may allow an attacker to execute code on a vulnerable system.
RealPlayer media player that is distributed by RealNetworks. RealPlayer supports streaming and local media.
Per the Zero Day Initiative advisory ZDI-08-046:
By convincing a user to visit a website, a remote attacker may be able to execute arbitrary code.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|RealNetworks, Inc.||Affected||-||28 Jul 2008|
CVSS Metrics (Learn More)
Thanks to ZDI for information that was used in this report.
This document was written by Ryan Giobbi.
- CVE IDs: Unknown
- Date Public: 25 Jul 2008
- Date First Published: 28 Jul 2008
- Date Last Updated: 28 Jul 2008
- Severity Metric: 25.31
- Document Revision: 3
If you have feedback, comments, or additional information about this vulnerability, please send us email.