CVE-2012-5691

Related Files

RealPlayer RealMedia File Handling Buffer Overflow

Posted Dec 28, 2012

Authored by suto | Site metasploit.com

This Metasploit module exploits a stack based buffer overflow on RealPlayer versions 15.0.6.14 and below. The vulnerability exists in the handling of real media files, due to the insecure usage of the GetPrivateProfileString function to retrieve the URL property from an InternetShortcut section. This Metasploit module generates a malicious rm file which must be opened with RealPlayer via drag and drop or double click methods. It has been tested successfully on Windows XP SP3 with RealPlayer 15.0.5.109.

tags | exploit, overflow

systems | windows

advisories | CVE-2012-5691, OSVDB-88486

SHA-256 | f1c623bc1dcad36e79d57718a63066d97b024a30199457832d62e68170935185

Download | Favorite | View