Summary
This host is running RealPlayer which is prone to IVR multiple vulnerabilities.
Impact
Successful exploitation will let the attacker execute arbitrary codes within the context of the application and can cause heap overflow or cause remote code execution to the application.
Solution
Upgrage to the latest version,
For updates refer to http://www.real.com/player
Insight
- Memory corruption while the application processes crafted arbitrary 'IVR' file.
- A vulnerability that allows an attacker to write one null byte to an arbitrary memory address by using an overly long file name length value.
Affected
RealPlayer 11.0.0.477 and prior on all Windows platforms.
References
Severity
Classification
-
CVE CVE-2009-0375, CVE-2009-0376 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities