| Package | Affected versions | Patched versions |
|---|---|---|
| realone enterprise desktop | = 6.0.11.774 | |
| realone player | = 2.0= 6.0.10.505= 6.0.11.818= 6.0.11.830= 6.0.11.841= 6.0.11.853= 9.0.0.288= 9.0.0.297 | |
| realplayer | = 8.0 |
The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free