CVE-2012-2406

CVE-2012-2406

EPSS 4.6%

RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/81943 http://secunia.com/advisories/49193 http://service.real.com/realplayer/security/05152012_player/en/https://exchange.xforce.ibmcloud.com/vulnerabilities/75647 http://www.securitytracker.com/id?1027076