RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.
References
Link | Resource |
---|---|
http://service.real.com/realplayer/security/11182011_player/en/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-11-24 03:55
Updated : 2012-03-07 21:00
NVD link : CVE-2011-4258
Mitre link : CVE-2011-4258
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
realnetworks
- realplayer