NGSSoftware has discovered a vulnerability in RealOne Player / RealPlayer, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified boundary error within the handling of the R3T file format. This can be exploited to cause a buffer overflow via a specially crafted ".R3T" file.

Successful exploitation allows execution of arbitrary code on a user's system but requires that the user has installed the R3T plug-in and can be tricked into opening the file (e.g. by visiting a malicious website).

Solution
Updates are available and can be applied via the "Check for Update" feature or manually (see vendor advisory).

Provided and/or discovered by
Mark Litchfield, NGSSoftware.

Original Advisory
RealNetworks:
http://www.service.real.com/help/faq/security/040406_r3t/en/

NGSSoftware:
http://www.nextgenss.com/advisories/realr3t.txt

Deep Links
Links available in Customer Area