vendor:
RealPlayer
by:
Elazar Broad
7.5
CVSS
HIGH
Heap Corruption
119
CWE
Product Name: RealPlayer
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE: CVE-2008-1309
CPE: a:realnetworks:realplayer
Platforms Tested: Windows
2008
RealPlayer rmoc3260.dll ActiveX Control Heap Corruption
This module exploits a heap corruption vulnerability in the RealPlayer ActiveX control. By sending a specially crafted string to the 'Console' property in the rmoc3260.dll control, an attacker may be able to execute arbitrary code.