CVE-2011-2948

Related Files

Zero Day Initiative Advisory 11-268

Posted Aug 17, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-268 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way RealPlayer handles DEFINEFONT fields in Flash Files. When the process parses corrupt a ShapeRecord with the DefineFont record it reads outside a stack buffer and uses a random stack value as a heap pointer. Later this pointer will be used to write data into. The resulting corruption can lead to remote code execution under the context of the current user.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2011-2948

SHA-256 | 5e61aa1c0dd0d3322339a2871be565333c58e9361524ac932545f51995f4cb78

Download | Favorite | View