RealNetworks RealPlayer Internet Video Recording Multiple Vulnerabilities

Two vulnerabilities have been identified in RealNetworks RealPlayer, which could be exploited by attackers to compromise a vulnerable system.

1. Due to a heap corruption error when processing Internet Video Recording (IVR) files containing a malformed field that determines the length of a structure, which could allow attackers to crash an affected application or execute arbitrary code by tricking a user into visiting a malicious web page or opening a specially crafted IVR file.

2. Due to a memory corruption error when processing Internet Video Recording (IVR) files with an overly long filename length value, which could allow attackers to crash an affected application or write a null byte to an arbitrary memory address by tricking a user into visiting a malicious web page or opening a specially crafted IVR file.