PT-2003-1395
CVE-2003-0141
·
تاريخ النشر
2003-03-29
·
تاريخ التحديث
2016-10-18
الوصف من
CVSS 2.0
5.1
متوسطةالمقاييسAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
RealOne Player versions 6.0.11.x and earlier
RealPlayer 8/RealPlayer Plus 8 version 6.0.9.584
Description:
The issue concerns the PNG deflate algorithm, which allows remote attackers to corrupt the heap and overwrite arbitrary memory. This is achieved through a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, treated as a very large length.
Recommendations:
For RealOne Player versions 6.0.11.x and earlier, update to a version later than 6.0.11.x to resolve the issue.
For RealPlayer 8/RealPlayer Plus 8 version 6.0.9.584, update to a version later than 6.0.9.584 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾