Description
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
Affected products
- RealNetworks / realjukebox_21.0.2.340 – 1.0.2.340
- RealNetworks / realjukebox_21.0.2.379 – 1.0.2.379
- RealNetworks / realjukebox_2_plus1.0.2.340 – 1.0.2.340
- RealNetworks / realjukebox_2_plus1.0.2.379 – 1.0.2.379
- RealNetworks / realone_player6.0.10.505 – 6.0.10.505