CVE ID | CVE-2011-4247 |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
RealNetworks |
AFFECTED PRODUCTS |
RealPlayer |
VULNERABILITY DETAILS |
The specific flaw exists within the way RealPlayer handles audio encoded with the QCELP codec. The codec allows you to specify the 'block_size' that is used. This size is used to create an allocation to hold the data, but a hardcoded blocksize is later used to copy data into that allocation. This could lead to remote code execution under the context of the current user. |
ADDITIONAL DETAILS |
RealNetworks has issued an update to correct this vulnerability. More details can be found at:
http://service.real.com/realplayer/security/11182011_player/en/ |
DISCLOSURE TIMELINE |
|
CREDIT | Damian Put |