high8.8
CVE-2022-32291
In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file.
Impact
In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Realplayer | through 20.1.0.312 |