Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RealNetworks RealPlayer缓冲区溢出漏洞
Vulnerability Description
RealNetworks RealNetworks RealPlayer是美国RealNetworks公司开发的一套媒体播放器产品。该产品提供下载/转换视频（在网页中）、编辑视频、管理媒体文件等功能。 RealNetworks RealPlayer在处理Flash文件中的DEFINEFONT字段时存在缓冲区溢出漏洞。当进程解析破坏带有DefineFont记录的ShapeRecord时，进程会读取栈缓冲区之外的信息并使用一个随机栈值作为堆指针，随后使用该指针写入数据。远程攻击者可利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A