RealPlayer multiple vulnerabilities
Some vulnerabilities have been reported in RealPlayer, which can be exploited by malicious people to compromise a user’s system, according to Secunia.
1. A use-after-free error exists in pngu3267.dll within the handling of displayed dialog boxes when navigating away from a web page. This can be exploited to dereference already freed memory by tricking a user into visiting a specially crafted web page and e.g. display the “Copyrights” or “Version Info” dialog box via the “About RealPlayer” context menu or open the “About This Presentation” dialog box.
Successful exploitation of this vulnerability allows execution of arbitrary code.
2. An unspecified error related to SIPR can be exploited to cause a heap-based buffer overflow.
3. An unspecified error related to the RealPlayer ActiveX control can be exploited to execute arbitrary code.
4. The application allows the processing of local HTML files with scripting enabled, which can be exploited to execute arbitrary code by e.g. tricking a user into visiting a malicious website.
5. An error within the handling of “DEFINEFONT” fields when parsing Flash files can be exploited to cause a memory corruption.
6. A boundary error within the handling of certain ID3v2 tags in MP3 files can be exploited to cause a heap-based buffer overflow.
7. A boundary error within qcpfformat.dll when handling certain QCP media files can be exploited to cause a heap-based buffer overflow.
8. An error within the parsing of AAC raw_data_frame elements can be exploited to cause a buffer overflow.
9. An unspecified “Out of Bounds” error exists within the RealPlayer ActiveX control
10. An unspecified use-after-free error related to “Embedded AutoUpdate” exists within the RealPlayer ActiveX control.
11. An unspecified use-after-free error related to “Embedded Modal Dialog” exists within the RealPlayer ActiveX control.
The vulnerabilities are reported in versions 14.0.0 through 14.0.5. Other versions may also be affected.
Solution: Update to version 14.0.6.