Multiple vulnerabilities have been reported in RealPlayer, which can be exploited by malicious people to compromise a user's system.

1) An unspecified error exists in rvrender when processing RMFF flags.

2) An unspecified error exists when processing RV20 frame size array.

3) An error in dmp4.dll when validating the size of a destination buffer during decoding of MPEG streams can be exploited to cause a heap-based buffer overflow via media content including specially crafted coded_frame_size values.

4) An unspecified error exists when processing RV40 content.

5) An unspecified error exists when processing height and width values within RV10 encoded content.

6) Improper validation in cook.dll of the "coded_frame_sz" element of a RA2 header when unpacking stream data can be exploited to cause a buffer overflow via a specially crafted RealAudio 2.0 file.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in version 15.0.1.13 and prior.

Solution
Update to version 15.0.2.71.

Provided and/or discovered by
3, 6) Luigi Auriemma via ZDI.

The vendor credits:
1, 2) Luigi Auriemma
4, 5) Dan Rosenberg, Virtual Security Research and Damian Put

Changelog
Further details available in Customer Area

Original Advisory
RealPlayer:
http://service.real.com/realplayer/security/02062012_player/en/

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-048/
http://www.zerodayinitiative.com/advisories/ZDI-12-049/

Deep Links
Links available in Customer Area