Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

RealPlayer/HelixPlayer ParseWallClockValue Function Buffer Overflow Vulnerability

RealPlayer and HelixPlayer are prone to a buffer-overflow vulnerability because the applications fail to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.







 

Privacy Statement
Copyright 2009, SecurityFocus