Secunia

Two vulnerabilities have been reported in various RealNetworks products, which can be exploited by malicious people to compromise a user's system.

1) A boundary error within the processing of WAV files can be exploited to cause a buffer overflow via a specially crafted WAV file.

2) A boundary error within the processing of SMIL files can be exploited to cause a stack-based buffer overflow via a specially crafted SMIL file.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Mark Litchfield, NGS Software.
2) Discovered by anonymous person and reported via iDEFENSE.

Changelog
Further details available in Customer Area

Original Advisory
RealNetworks:
http://service.real.com/help/faq/security/050224_player/EN/

iDEFENSE:
http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities

NGSSoftware:
http://www.ngssoftware.com/advisories/realwav.txt

Deep Links
Links available in Customer Area