Real Networks RealAudio Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Real Networks RealPlayer 15.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56956
CVE (CAN) ID: CVE-2012-5691

RealPlayer is a tool used to listen to and watch real-time audio, video, and Flash on the Internet.

RealPlayer 15.0.6.14 and earlier versions have errors in processing RealAudio files, which can cause overflow of the reference buffer and control the user system.

<* Source: Senator
Sutos

Link: http://secunia.com/advisories/51589/
Http://service.real.com/realplayer/security/12142012_player/en/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Real Networks
-------------
Real Networks has released a Security Bulletin (12142012_player) and corresponding patches for this purpose:

12142012_player: RealNetworks, Inc. Releases Update to Address Security Vulnerabilities.

Link: http://service.real.com/realplayer/security/12142012_player/en/