This host is installed with RealPlayer which is prone to multiple vulnerabilities.

Successful exploitation will let the attacker execute arbitrary codes within the context of the application and can cause heap overflow or cause denial of service. Impact Level: Application

Upgrade to RealPlayer version 15.0.0 or later For updates refer to http://www.real.com/player

Multiple flaws are due to, - Unspecified errors in RV20, RV10, RV30, ATRC and AAC codec, allows attackers to execute arbitrary code via unspecified vectors. - An unspecified error related to RealVideo rendering, related to MP4 video dimensions can be exploited to corrupt memory. - An unspecified error exists when parsing of QCELP streams, MP4 headers, MP4 files and the channel within the Cook codec and MLTI chunk length within IVR files. - An unspecified error exists related to sample size when parsing RealAudio files. - An unspecified error exists when handling RTSP SETUP requests.

RealPlayer versions prior to 15.0.0

• http://secunia.com/advisories/46954/
• http://service.real.com/realplayer/security/11182011_player/en/

---

Updated on 2015-03-25