icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

RealPlayer Skin File Handling Buffer Overflow

Medium

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is running a version of RealPlayer which is vulnerable to an overflow via a malformed skin file. As skin files are downloaded, typically, without any sort of warning or prompt to the user, the remote attacker need only create a website with a malformed skins file and entice the user to visit the site.

Solution

Upgrade or patch according to vendor recommendations.