RealPlayer: Buffer overflow vulnerability — GLSA 200603-24

RealPlayer is vulnerable to a buffer overflow that could lead to remote execution of arbitrary code.

Affected packages

Background

RealPlayer is a multimedia player capable of handling multiple multimedia file formats.

Description

RealPlayer is vulnerable to a buffer overflow when processing malicious SWF files.

Impact

By enticing a user to open a specially crafted SWF file an attacker could execute arbitrary code with the permissions of the user running the application.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-video/realplayer-10.0.7"

References

• CVE-2006-0323
• RealNetworks Advisory

Release date
March 26, 2006

Latest revision
March 26, 2006: 01

Severity
normal

Exploitable
remote

Bugzilla entries

• 127352