NetSight
IP …
medium5.1

CVE-2003-0141

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corru…

Impact

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.

Affected products

VendorProductAffected versions
RealnetworksRealone Enterprise Desktop
Version 6.0.11.774
RealnetworksRealone Player
Versions 2.0, 6.0.10.505, 6.0.11.818, 6.0.11.830, 6.0.11.841, 6.0.11.853
RealnetworksRealplayer
Version 8.0

References