CVE-2010-4377

Related Files

Zero Day Initiative Advisory 10-272

Posted Dec 11, 2010

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 10-272 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious media file. The specific flaw exists in the parsing of audio codec information encapsulated in a Real Audio media file. While processing cook audio codec data the number of subbands is improperly calculated. By specifying a large number of subbands an allocated heap chunk can be overflown. Successful exploitation can result in system compromise under the credentials of the currently logged in user.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2010-4377

SHA-256 | 122c4813641f49d9aa2f60456e86f200ba1cc74c9667e7ce6d63d41babbb294f

Download | Favorite | View