eEye Digital Security and NGSSoftware have reported a vulnerability in RealPlayer and RealOne, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in a 3rd-party compression library (DUNZIP32.dll) when processing skin files. This can be exploited to cause a buffer overflow via a specially crafted skin file.

Successful exploitation allows execution of arbitrary code.

The vulnerability affects the following versions:
* RealPlayer 10.5 (prior to build 6.0.12.1056)
* RealPlayer 10
* RealOne Player v2
* RealOne Player v1
* DynaZip (prior to version 5.00.04)
* DynaZip Max (prior to version 6.00.01)

The vulnerability is related to:
SA12805

Solution
RealPlayer/RealOne:
Further details available to Secunia VIM customers

Provided and/or discovered by
Independently discovered by:
* Yuji Ukai, eEye Digital Security.
* John Heasman, NGSSoftware.

Changelog
Further details available to Secunia VIM customers

Original Advisory
RealNetworks:
http://www.service.real.com/help/faq/security/041026_player/EN/

eEye Digital Security:
http://www.eeye.com/html/research/advisories/AD20041027.html

NGSSoftware:
http://www.nextgenss.com/advisories/realra3.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers