Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 up to and including 6.0.12.1741; RealPlayer 11 11.0.0 up to and including 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote malicious users to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
realnetworks realplayer_sp 1.0.1 |
||
realnetworks realplayer 11.0.1 |
||
realnetworks realplayer_enterprise |
||
realnetworks realplayer_sp 1.0.0 |
||
realnetworks realplayer 10.5 |
||
realnetworks realplayer 10.0 |
||
realnetworks realplayer 11.0.5 |
||
realnetworks realplayer 11.0 |
||
realnetworks realplayer 11.0.2 |
||
realnetworks realplayer 11.0.3 |
||
realnetworks realplayer 11.0.4 |
||
realnetworks realplayer 10.1 |
||
realnetworks helix player 11.0.0 |
||
realnetworks helix player 10.0 |
||
realnetworks helix player 11.0.1 |
||
realnetworks realplayer 11.0.0 |
Vulmon