RealNetworks RealOne Player And RealPlayer are reported prone to multiple potential vulnerabilities. These issues may allow an attacker to potentially execute arbitrary code or disclose the presence of files on a vulnerable computer. The following specific issues were identified: The first issue presents itself when the application processes Real Metadata Package files containing malformed tags. The researchers responsible for discovering this issue have reported that this issue may not be exploitable and represents a potential threat. The second issue may allow attacker to determine the existence of files on a vulnerable computer. The validity of this issue is not confirmed at the moment is also considered a potential threat. It is likely that this issues were originally released as unspecified vulnerabilities. This cannot be confirmed at the moment, however, one of the BIDs will be retired, if it turns out that the BIDs represent the same issues.
RealNetworks RealOne Player And RealPlayer are reported prone to multiple potential vulnerabilities. These issues may allow an attacker to potentially execute arbitrary code or disclose the presence of files on a vulnerable computer. The following specific issues were identified: The first issue presents itself when the application processes Real Metadata Package files containing malformed tags. The researchers responsible for discovering this issue have reported that this issue may not be exploitable and represents a potential threat. The second issue may allow attacker to determine the existence of files on a vulnerable computer. The validity of this issue is not confirmed at the moment is also considered a potential threat. It is likely that this issues were originally released as unspecified vulnerabilities. This cannot be confirmed at the moment, however, one of the BIDs will be retired, if it turns out that the BIDs represent the same issues.