| Package | Affected versions | Patched versions |
|---|---|---|
| helix player | = 10.0= 11.0.0= 11.0.1 | |
| realplayer | = 10.0= 10.1= 10.5= 11.0= 11.0.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.0.5 | |
| realplayer sp | = 1.0.0= 1.0.1 |
Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free