Secunia

Piotr Bania has reported a vulnerability in Realplayer and RealOne, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing RAM files and can be exploited to cause a buffer overflow via a specially crafted RAM file.

Successful exploitation allows execution of arbitrary code.

The vulnerability affects the following products:
* RealPlayer 10.5 (6.0.12.1040-1059)
* RealPlayer 10
* RealOne Player v2
* RealOne Player v1
* RealPlayer 8
* RealPlayer Enterprise
* Mac RealPlayer 10 (10.0.0.305 - 331)
* Mac RealOne Player
* Linux RealPlayer 10 (10.0.0 - 3)
* Helix Player (10.0.0 - 3)

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Piotr Bania

Changelog
Further details available in Customer Area

Original Advisory
RealNetworks:
http://service.real.com/help/faq/security/050419_player/
http://www.service.real.com/help/faq/security/security041905.html

Piotr Bania:
http://pb.specialised.info/all/adv/real-ram-adv.txt

Deep Links
Links available in Customer Area