CVE-2010-3751

Related Files

Zero Day Initiative Advisory 10-213

Posted Oct 16, 2010

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 10-213 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the RealPlayer ActiveX control. This module is responsible for handling the tfile, pnmm, cdda, protocol handlers. While parsing a long argument ending with ".smil" an attacker can overflow a buffer on the heap. This can be abused to execute arbitrary code under the context of the user invoking the control.

tags | advisory, remote, overflow, arbitrary, protocol, activex

advisories | CVE-2010-3751

SHA-256 | 99a8d76f437ce493e71d2cbbccf04da1d99377f3e56f8989ce9114468ab2402c

Download | Favorite | View