| Package | Affected versions | Patched versions |
|---|---|---|
| realone player | = 2.0 | |
| realplayer | = 6.0= 7.0= 8.0 |
Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free