CVE-2011-4255

Related Files

Zero Day Initiative Advisory 11-336

Posted Nov 29, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-336 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when a user attempts to play a malicious video file containing a malformed codec name. When playing a malformed codec, the application will incorrectly free an object and then later attempt to use it by calling a virtual method pointer upon destruction. This can lead to code execution under the context of the application.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2011-4255

SHA-256 | 9d53034c4b494677e64872a2ededd13105e2853f31741bbb3f677d42af486353

Download | Favorite | View