CVE-2009-4248

Related Files

iDEFENSE Security Advisory 2010-02-01.2

Posted Feb 2, 2010

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 02.01.10 - Remote exploitation of an integer overflow vulnerability in RealNetworks Inc.'s Real Player could allow an attacker to execute arbitrary code with the privileges of the current user. This problem specifically exists in the CMediumBlockAllocator::Alloc method. When calculating the size of a memory allocation, an integer overflow occurs. This leads to heap corruption, which can result in the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in Real Player versions 10.5 (build 6.0.12.883) and 11 (build 6.0.14.738) on Windows. Other versions may also be affected.

tags | advisory, remote, overflow, arbitrary

systems | windows

advisories | CVE-2009-4248

SHA-256 | 1df83847e5c312d16805b0467196f103f05a9e417ac7ca5b56ff18c5fc13833e

Download | Favorite | View